diff --git a/.github/workflows/image-reuse.yaml b/.github/workflows/image-reuse.yaml index 90acbad76ee5b..7510f0571670d 100644 --- a/.github/workflows/image-reuse.yaml +++ b/.github/workflows/image-reuse.yaml @@ -104,7 +104,7 @@ jobs: echo 'EOF' >> $GITHUB_ENV - name: Login to Quay.io - uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0 + uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0 with: registry: quay.io username: ${{ secrets.quay_username }} @@ -112,7 +112,7 @@ jobs: if: ${{ inputs.quay_image_name && inputs.push }} - name: Login to GitHub Container Registry - uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0 + uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0 with: registry: ghcr.io username: ${{ secrets.ghcr_username }} @@ -120,7 +120,7 @@ jobs: if: ${{ inputs.ghcr_image_name && inputs.push }} - name: Login to dockerhub Container Registry - uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0 + uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0 with: username: ${{ secrets.docker_username }} password: ${{ secrets.docker_password }} diff --git a/.golangci.yaml b/.golangci.yaml index 0c704a41381da..96299f53fab27 100644 --- a/.golangci.yaml +++ b/.golangci.yaml @@ -5,6 +5,13 @@ issues: max-same-issues: 0 linters: enable: + - errcheck - gofmt + - gosimple + - govet + - ineffassign + - misspell + - staticcheck + - unused run: timeout: 50m diff --git a/applicationset/controllers/applicationset_controller.go b/applicationset/controllers/applicationset_controller.go index 8c6b87529a08f..dc57e6ab410be 100644 --- a/applicationset/controllers/applicationset_controller.go +++ b/applicationset/controllers/applicationset_controller.go @@ -1453,7 +1453,7 @@ func cleanupDeletedApplicationStatuses(statusMap map[string]argov1alpha1.Resourc } } -// setApplicationSetApplicationStatus updates the ApplicatonSet's status field +// setApplicationSetApplicationStatus updates the ApplicationSet's status field // with any new/changed Application statuses. func (r *ApplicationSetReconciler) setAppSetApplicationStatus(ctx context.Context, logCtx *log.Entry, applicationSet *argov1alpha1.ApplicationSet, applicationStatuses []argov1alpha1.ApplicationSetApplicationStatus) error { needToUpdateStatus := false @@ -1632,7 +1632,7 @@ func shouldRequeueApplicationSet(appOld *argov1alpha1.Application, appNew *argov // the applicationset controller owns the application spec, labels, annotations, and finalizers on the applications // reflect.DeepEqual considers nil slices/maps not equal to empty slices/maps // https://pkg.go.dev/reflect#DeepEqual - // ApplicationDestination has an unexported field so we can just use the == for comparsion + // ApplicationDestination has an unexported field so we can just use the == for comparison if !cmp.Equal(appOld.Spec, appNew.Spec, cmpopts.EquateEmpty(), cmpopts.EquateComparable(argov1alpha1.ApplicationDestination{})) || !cmp.Equal(appOld.ObjectMeta.GetAnnotations(), appNew.ObjectMeta.GetAnnotations(), cmpopts.EquateEmpty()) || !cmp.Equal(appOld.ObjectMeta.GetLabels(), appNew.ObjectMeta.GetLabels(), cmpopts.EquateEmpty()) || diff --git a/applicationset/controllers/applicationset_controller_test.go b/applicationset/controllers/applicationset_controller_test.go index 2dcb0e44758d6..ea6b39456f235 100644 --- a/applicationset/controllers/applicationset_controller_test.go +++ b/applicationset/controllers/applicationset_controller_test.go @@ -4113,7 +4113,7 @@ func TestBuildAppDependencyList(t *testing.T) { } appDependencyList, appStepMap, err := r.buildAppDependencyList(log.NewEntry(log.StandardLogger()), cc.appSet, cc.apps) - assert.Equal(t, err, nil, "expected no errors, but errors occured") + assert.Equal(t, err, nil, "expected no errors, but errors occurred") assert.Equal(t, cc.expectedList, appDependencyList, "expected appDependencyList did not match actual") assert.Equal(t, cc.expectedStepMap, appStepMap, "expected appStepMap did not match actual") }) @@ -4707,7 +4707,7 @@ func TestBuildAppSyncMap(t *testing.T) { } appSyncMap, err := r.buildAppSyncMap(context.TODO(), cc.appSet, cc.appDependencyList, cc.appMap) - assert.Equal(t, err, nil, "expected no errors, but errors occured") + assert.Equal(t, err, nil, "expected no errors, but errors occurred") assert.Equal(t, cc.expectedMap, appSyncMap, "expected appSyncMap did not match actual") }) } @@ -5373,7 +5373,7 @@ func TestUpdateApplicationSetApplicationStatus(t *testing.T) { appStatuses[i].LastTransitionTime = nil } - assert.Equal(t, err, nil, "expected no errors, but errors occured") + assert.Equal(t, err, nil, "expected no errors, but errors occurred") assert.Equal(t, cc.expectedAppStatus, appStatuses, "expected appStatuses did not match actual") }) } @@ -6127,7 +6127,7 @@ func TestUpdateApplicationSetApplicationStatusProgress(t *testing.T) { appStatuses[i].LastTransitionTime = nil } - assert.Equal(t, err, nil, "expected no errors, but errors occured") + assert.Equal(t, err, nil, "expected no errors, but errors occurred") assert.Equal(t, cc.expectedAppStatus, appStatuses, "expected appStatuses did not match actual") }) } @@ -6340,7 +6340,7 @@ func TestUpdateResourceStatus(t *testing.T) { err := r.updateResourcesStatus(context.TODO(), log.NewEntry(log.StandardLogger()), &cc.appSet, cc.apps) - assert.Equal(t, err, nil, "expected no errors, but errors occured") + assert.Equal(t, err, nil, "expected no errors, but errors occurred") assert.Equal(t, cc.expectedResources, cc.appSet.Status.Resources, "expected resources did not match actual") }) } diff --git a/assets/swagger.json b/assets/swagger.json index 9324be78d6be7..42c7a7cc11c19 100644 --- a/assets/swagger.json +++ b/assets/swagger.json @@ -6021,7 +6021,7 @@ }, "v1alpha1ApplicationSetCondition": { "type": "object", - "title": "ApplicationSetCondition contains details about an applicationset condition, which is usally an error or warning", + "title": "ApplicationSetCondition contains details about an applicationset condition, which is usually an error or warning", "properties": { "lastTransitionTime": { "$ref": "#/definitions/v1Time" diff --git a/cmd/argocd-repo-server/commands/argocd_repo_server.go b/cmd/argocd-repo-server/commands/argocd_repo_server.go index 2ba17cd9b64ba..f80968cf76f37 100644 --- a/cmd/argocd-repo-server/commands/argocd_repo_server.go +++ b/cmd/argocd-repo-server/commands/argocd_repo_server.go @@ -70,6 +70,7 @@ func NewCommand() *cobra.Command { helmManifestMaxExtractedSize string helmRegistryMaxIndexSize string disableManifestMaxExtractedSize bool + includeHiddenDirectories bool ) var command = cobra.Command{ Use: cliName, @@ -130,6 +131,7 @@ func NewCommand() *cobra.Command { StreamedManifestMaxTarSize: streamedManifestMaxTarSizeQuantity.ToDec().Value(), HelmManifestMaxExtractedSize: helmManifestMaxExtractedSizeQuantity.ToDec().Value(), HelmRegistryMaxIndexSize: helmRegistryMaxIndexSizeQuantity.ToDec().Value(), + IncludeHiddenDirectories: includeHiddenDirectories, }, askPassServer) errors.CheckError(err) @@ -215,6 +217,7 @@ func NewCommand() *cobra.Command { command.Flags().StringVar(&helmManifestMaxExtractedSize, "helm-manifest-max-extracted-size", env.StringFromEnv("ARGOCD_REPO_SERVER_HELM_MANIFEST_MAX_EXTRACTED_SIZE", "1G"), "Maximum size of helm manifest archives when extracted") command.Flags().StringVar(&helmRegistryMaxIndexSize, "helm-registry-max-index-size", env.StringFromEnv("ARGOCD_REPO_SERVER_HELM_MANIFEST_MAX_INDEX_SIZE", "1G"), "Maximum size of registry index file") command.Flags().BoolVar(&disableManifestMaxExtractedSize, "disable-helm-manifest-max-extracted-size", env.ParseBoolFromEnv("ARGOCD_REPO_SERVER_DISABLE_HELM_MANIFEST_MAX_EXTRACTED_SIZE", false), "Disable maximum size of helm manifest archives when extracted") + command.Flags().BoolVar(&includeHiddenDirectories, "include-hidden-directories", env.ParseBoolFromEnv("ARGOCD_REPO_SERVER_INCLUDE_HIDDEN_DIRECTORIES", false), "Include hidden directories from Git") tlsConfigCustomizerSrc = tls.AddTLSFlagsToCmd(&command) cacheSrc = reposervercache.AddCacheFlagsToCmd(&command, cacheutil.Options{ OnClientCreated: func(client *redis.Client) { diff --git a/cmd/argocd/commands/app_test.go b/cmd/argocd/commands/app_test.go index ec9dcdf0f8e65..82cfc6cf76377 100644 --- a/cmd/argocd/commands/app_test.go +++ b/cmd/argocd/commands/app_test.go @@ -1357,47 +1357,47 @@ func TestFilterAppResources(t *testing.T) { expectedResult []*v1alpha1.SyncOperationResource }{ // --resource apps:ReplicaSet:replicaSet-name1 --resource *:Service:* - {testName: "Include ReplicaSet replicaSet-name1 resouce and all service resources", + {testName: "Include ReplicaSet replicaSet-name1 resource and all service resources", selectedResources: []*v1alpha1.SyncOperationResource{&includeAllServiceResources, &includeReplicaSet1Resource}, expectedResult: []*v1alpha1.SyncOperationResource{&replicaSet1, &service1, &service2}, }, // --resource apps:ReplicaSet:replicaSet-name1 --resource !*:Service:* - {testName: "Include ReplicaSet replicaSet-name1 resouce and exclude all service resources", + {testName: "Include ReplicaSet replicaSet-name1 resource and exclude all service resources", selectedResources: []*v1alpha1.SyncOperationResource{&excludeAllServiceResources, &includeReplicaSet1Resource}, expectedResult: []*v1alpha1.SyncOperationResource{&replicaSet1, &replicaSet2, &job, &deployment}, }, // --resource !apps:ReplicaSet:replicaSet-name2 --resource !*:Service:* - {testName: "Exclude ReplicaSet replicaSet-name2 resouce and all service resources", + {testName: "Exclude ReplicaSet replicaSet-name2 resource and all service resources", selectedResources: []*v1alpha1.SyncOperationResource{&excludeReplicaSet2Resource, &excludeAllServiceResources}, expectedResult: []*v1alpha1.SyncOperationResource{&replicaSet1, &replicaSet2, &job, &service1, &service2, &deployment}, }, // --resource !apps:ReplicaSet:replicaSet-name2 - {testName: "Exclude ReplicaSet replicaSet-name2 resouce", + {testName: "Exclude ReplicaSet replicaSet-name2 resource", selectedResources: []*v1alpha1.SyncOperationResource{&excludeReplicaSet2Resource}, expectedResult: []*v1alpha1.SyncOperationResource{&replicaSet1, &job, &service1, &service2, &deployment}, }, // --resource apps:ReplicaSet:replicaSet-name1 - {testName: "Include ReplicaSet replicaSet-name1 resouce", + {testName: "Include ReplicaSet replicaSet-name1 resource", selectedResources: []*v1alpha1.SyncOperationResource{&includeReplicaSet1Resource}, expectedResult: []*v1alpha1.SyncOperationResource{&replicaSet1}, }, // --resource !*:Service:* - {testName: "Exclude Service resouces", + {testName: "Exclude Service resources", selectedResources: []*v1alpha1.SyncOperationResource{&excludeAllServiceResources}, expectedResult: []*v1alpha1.SyncOperationResource{&replicaSet1, &replicaSet2, &job, &deployment}, }, // --resource *:Service:* - {testName: "Include Service resouces", + {testName: "Include Service resources", selectedResources: []*v1alpha1.SyncOperationResource{&includeAllServiceResources}, expectedResult: []*v1alpha1.SyncOperationResource{&service1, &service2}, }, // --resource !*:*:* - {testName: "Exclude all resouces", + {testName: "Exclude all resources", selectedResources: []*v1alpha1.SyncOperationResource{&excludeAllResources}, expectedResult: nil, }, // --resource *:*:* - {testName: "Include all resouces", + {testName: "Include all resources", selectedResources: []*v1alpha1.SyncOperationResource{&includeAllResources}, expectedResult: []*v1alpha1.SyncOperationResource{&replicaSet1, &replicaSet2, &job, &service1, &service2, &deployment}, }, diff --git a/cmd/argocd/commands/cluster.go b/cmd/argocd/commands/cluster.go index f203b82ae9ac0..9fbe0806c3e4a 100644 --- a/cmd/argocd/commands/cluster.go +++ b/cmd/argocd/commands/cluster.go @@ -490,7 +490,7 @@ func NewClusterListCommand(clientOpts *argocdclient.ClientOptions) *cobra.Comman # List Clusters in Default "Wide" Format argocd cluster list -# List Cluster via specifing the server +# List Cluster via specifying the server argocd cluster list --server # List Clusters in JSON Format diff --git a/cmd/argocd/commands/projectwindows.go b/cmd/argocd/commands/projectwindows.go index 93843130ebb13..35a3441351280 100644 --- a/cmd/argocd/commands/projectwindows.go +++ b/cmd/argocd/commands/projectwindows.go @@ -58,7 +58,7 @@ func NewProjectWindowsDisableManualSyncCommand(clientOpts *argocdclient.ClientOp #Disable manual sync for a sync window for the Project argocd proj windows disable-manual-sync PROJECT ID -#Disbaling manual sync for a windows set on the default project with Id 0 +#Disabling manual sync for a windows set on the default project with Id 0 argocd proj windows disable-manual-sync default 0`, Run: func(c *cobra.Command, args []string) { ctx := c.Context() diff --git a/cmpserver/plugin/plugin.go b/cmpserver/plugin/plugin.go index ca1e7592218ea..89b329beaf994 100644 --- a/cmpserver/plugin/plugin.go +++ b/cmpserver/plugin/plugin.go @@ -128,8 +128,8 @@ func runCommand(ctx context.Context, command Command, path string, env []string) if len(output) == 0 { logCtx.Warn("Plugin command returned zero output") } else { - // Log stderr even on successfull commands to help develop plugins - logCtx.Info("Plugin command successfull") + // Log stderr even on successful commands to help develop plugins + logCtx.Info("Plugin command successful") } return strings.TrimSuffix(output, "\n"), nil diff --git a/common/common.go b/common/common.go index b825ccddef91f..090cd33965e54 100644 --- a/common/common.go +++ b/common/common.go @@ -113,7 +113,7 @@ const ( // LegacyShardingAlgorithm is the default value for Sharding Algorithm it uses an `uid` based distribution (non-uniform) LegacyShardingAlgorithm = "legacy" - // RoundRobinShardingAlgorithm is a flag value that can be opted for Sharding Algorithm it uses an equal distribution accross all shards + // RoundRobinShardingAlgorithm is a flag value that can be opted for Sharding Algorithm it uses an equal distribution across all shards RoundRobinShardingAlgorithm = "round-robin" // AppControllerHeartbeatUpdateRetryCount is the retry count for updating the Shard Mapping to the Shard Mapping ConfigMap used by Application Controller AppControllerHeartbeatUpdateRetryCount = 3 @@ -206,7 +206,7 @@ const ( EnvVarTLSDataPath = "ARGOCD_TLS_DATA_PATH" // EnvGitAttemptsCount specifies number of git remote operations attempts count EnvGitAttemptsCount = "ARGOCD_GIT_ATTEMPTS_COUNT" - // EnvGitRetryMaxDuration specifices max duration of git remote operation retry + // EnvGitRetryMaxDuration specifies max duration of git remote operation retry EnvGitRetryMaxDuration = "ARGOCD_GIT_RETRY_MAX_DURATION" // EnvGitRetryDuration specifies duration of git remote operation retry EnvGitRetryDuration = "ARGOCD_GIT_RETRY_DURATION" @@ -353,7 +353,7 @@ func GetCMPChunkSize() int { } // GetCMPWorkDir will return the full path of the work directory used by the CMP server. -// This directory and all it's contents will be deleted durring CMP bootstrap. +// This directory and all it's contents will be deleted during CMP bootstrap. func GetCMPWorkDir() string { if workDir := os.Getenv(EnvCMPWorkDir); workDir != "" { return filepath.Join(workDir, DefaultCMPWorkDirName) diff --git a/controller/health.go b/controller/health.go index b1acac8ac5b9b..f713a574f57d3 100644 --- a/controller/health.go +++ b/controller/health.go @@ -80,7 +80,7 @@ func setApplicationHealth(resources []managedResource, statuses []appv1.Resource app.Status.ResourceHealthSource = appv1.ResourceHealthLocationAppTree } if savedErr != nil && errCount > 1 { - savedErr = fmt.Errorf("see applicaton-controller logs for %d other errors; most recent error was: %w", errCount-1, savedErr) + savedErr = fmt.Errorf("see application-controller logs for %d other errors; most recent error was: %w", errCount-1, savedErr) } return &appHealth, savedErr } diff --git a/controller/sharding/cache.go b/controller/sharding/cache.go index 2f3ffcbcb95c6..e7a8db4c5fb19 100644 --- a/controller/sharding/cache.go +++ b/controller/sharding/cache.go @@ -51,7 +51,7 @@ func NewClusterSharding(_ db.ArgoDB, shard, replicas int, shardingAlgorithm stri return clusterSharding } -// IsManagedCluster returns wheter or not the cluster should be processed by a given shard. +// IsManagedCluster returns whether or not the cluster should be processed by a given shard. func (s *ClusterSharding) IsManagedCluster(c *v1alpha1.Cluster) bool { s.lock.RLock() defer s.lock.RUnlock() diff --git a/controller/sharding/sharding.go b/controller/sharding/sharding.go index e4af7010931c6..c415acf0b8b04 100644 --- a/controller/sharding/sharding.go +++ b/controller/sharding/sharding.go @@ -54,7 +54,7 @@ type shardApplicationControllerMapping struct { } // GetClusterFilter returns a ClusterFilterFunction which is a function taking a cluster as a parameter -// and returns wheter or not the cluster should be processed by a given shard. It calls the distributionFunction +// and returns whether or not the cluster should be processed by a given shard. It calls the distributionFunction // to determine which shard will process the cluster, and if the given shard is equal to the calculated shard // the function will return true. func GetClusterFilter(db db.ArgoDB, distributionFunction DistributionFunction, replicas, shard int) ClusterFilterFunction { @@ -128,13 +128,13 @@ func LegacyDistributionFunction(replicas int) DistributionFunction { // for a given cluster the function will return the shard number based on the modulo of the cluster rank in // the cluster's list sorted by uid on the shard number. // This function ensures an homogenous distribution: each shards got assigned the same number of -// clusters +/-1 , but with the drawback of a reshuffling of clusters accross shards in case of some changes +// clusters +/-1 , but with the drawback of a reshuffling of clusters across shards in case of some changes // in the cluster list func RoundRobinDistributionFunction(clusters clusterAccessor, replicas int) DistributionFunction { return func(c *v1alpha1.Cluster) int { if replicas > 0 { - if c == nil { // in-cluster does not necessarly have a secret assigned. So we are receiving a nil cluster here. + if c == nil { // in-cluster does not necessary have a secret assigned. So we are receiving a nil cluster here. return 0 } // if Shard is manually set and the assigned value is lower than the number of replicas, diff --git a/docs/assets/versions.css b/docs/assets/versions.css index b8bb066929dd0..ae75d223d1335 100644 --- a/docs/assets/versions.css +++ b/docs/assets/versions.css @@ -53,7 +53,7 @@ div[data-md-component=announce]>div#announce-msg>a{ } /* from https://assets.readthedocs.org/static/css/badge_only.css, -most styles have to be overriden here */ +most styles have to be overridden here */ .rst-versions{ position: relative !important; bottom: 0; diff --git a/docs/developer-guide/dependencies.md b/docs/developer-guide/dependencies.md index 410fd1241b1b2..2a4c869825e31 100644 --- a/docs/developer-guide/dependencies.md +++ b/docs/developer-guide/dependencies.md @@ -6,31 +6,32 @@ https://github.com/argoproj/gitops-engine -### Pulling changes from `gitops-engine` +### Pulling changes from `gitops-engine` -After your GitOps Engine PR has been merged, ArgoCD needs to be updated to pull in the version of the GitOps engine that contains your change. Here are the steps: +After your GitOps Engine PR has been merged, ArgoCD needs to be updated to pull in the version of the GitOps engine that contains your change. Here are the steps: -* Retrieve the SHA hash for your commit. You will use this in the next step. -* From the `argo-cd` folder, run the following command +- Retrieve the SHA hash for your commit. You will use this in the next step. +- From the `argo-cd` folder, run the following command - `go get github.com/argoproj/gitops-engine@` + `go get github.com/argoproj/gitops-engine@` - If you get an error message `invalid version: unknown revision` then you got the wrong SHA hash + If you get an error message `invalid version: unknown revision` then you got the wrong SHA hash -* Run: +- Run: - `go mod tidy` + `go mod tidy` -* The following files are changed: +- The following files are changed: - - `go.mod` - - `go.sum` + - `go.mod` + - `go.sum` -* Create an ArgoCD PR with a `refactor:` type in its title for the two file changes. +- Create an ArgoCD PR with a `refactor:` type in its title for the two file changes. ### Tips: -* See https://github.com/argoproj/argo-cd/pull/4434 as an example -* The PR might require additional, dependent changes in ArgoCD that are directly impacted by the changes made in the engine. + +- See https://github.com/argoproj/argo-cd/pull/4434 as an example +- The PR might require additional, dependent changes in ArgoCD that are directly impacted by the changes made in the engine. ## Argo UI Components @@ -45,10 +46,8 @@ If you make changes to the Argo UI component, and your Argo CD changes depend on 1. Make changes to Argo UI and submit the PR request. 2. Also, prepare your Argo CD changes, but don't create the PR just yet. 3. **After** the Argo UI PR has been merged to master, then as part of your Argo CD changes: - - Run `yarn add git+https://github.com/argoproj/argo-ui.git` in the `ui/` directory, and then, - - Check in the regenerated yarn.lock file as part of your Argo CD commit -4. Create the Argo CD PR when you are ready. The PR build and test checks should pass. + - Run `yarn add git+https://github.com/argoproj/argo-ui.git` in the `ui/` directory, and then, + - Check in the regenerated yarn.lock file as part of your Argo CD commit +4. Create the Argo CD PR when you are ready. The PR build and test checks should pass. If your Argo UI change is a 'stand-alone' fix, and you simply want Argo CD to pull in your change, then simply create an Argo CD PR with the yarn.lock file change. - - diff --git a/docs/developer-guide/extensions/proxy-extensions.md b/docs/developer-guide/extensions/proxy-extensions.md index c53946cade95f..5d561657eb873 100644 --- a/docs/developer-guide/extensions/proxy-extensions.md +++ b/docs/developer-guide/extensions/proxy-extensions.md @@ -120,7 +120,7 @@ Is the address where the extension backend must be available. If provided, the headers list will be added on all outgoing requests for this service config. Existing headers in the incoming request with -the same name will be overriden by the one in this list. Reserved header +the same name will be overridden by the one in this list. Reserved header names will be ignored (see the [headers](#incoming-request-headers) below). #### `extensions.backend.services.headers.name` (*string*) diff --git a/docs/getting_started.md b/docs/getting_started.md index 1cf4a91115f2e..ce0d9688e7963 100644 --- a/docs/getting_started.md +++ b/docs/getting_started.md @@ -23,7 +23,7 @@ This will create a new namespace, `argocd`, where Argo CD services and applicati namespace then make sure to update the namespace reference. !!! tip - If you are not interested in UI, SSO, and multi-cluster features, then you can install only the [core](operator-manual/core/#installing) Argo CD components. + If you are not interested in UI, SSO, and multi-cluster features, then you can install only the [core](operator-manual/core.md#installing) Argo CD components. This default installation will have a self-signed certificate and cannot be accessed without a bit of extra work. Do one of: diff --git a/docs/operator-manual/argocd-cmd-params-cm.yaml b/docs/operator-manual/argocd-cmd-params-cm.yaml index 3cb79d85f3150..ae2072a18fb53 100644 --- a/docs/operator-manual/argocd-cmd-params-cm.yaml +++ b/docs/operator-manual/argocd-cmd-params-cm.yaml @@ -58,7 +58,7 @@ data: controller.resource.health.persist: "true" # Cache expiration default (default 24h0m0s) controller.default.cache.expiration: "24h0m0s" - # Sharding algorithm used to balance clusters accross application controller shards (default "legacy") + # Sharding algorithm used to balance clusters across application controller shards (default "legacy") controller.sharding.algorithm: legacy # Number of allowed concurrent kubectl fork/execs. Any value less than 1 means no limit. controller.kubectl.parallelism.limit: "20" @@ -179,6 +179,8 @@ data: reposerver.git.lsremote.parallelism.limit: "0" # Git requests timeout. reposerver.git.request.timeout: "15s" + # Include hidden directories from Git + reposerver.include.hidden.directories: "false" # Disable TLS on the HTTP endpoint dexserver.disable.tls: "false" diff --git a/docs/operator-manual/high_availability.md b/docs/operator-manual/high_availability.md index 75160aba197b4..60ea048ffca68 100644 --- a/docs/operator-manual/high_availability.md +++ b/docs/operator-manual/high_availability.md @@ -82,7 +82,7 @@ spec: ``` * In order to manually set the cluster's shard number, specify the optional `shard` property when creating a cluster. If not specified, it will be calculated on the fly by the application controller. -* The shard distribution algorithm of the `argocd-application-controller` can be set by using the `--sharding-method` parameter. Supported sharding methods are : [legacy (default), round-robin]. `legacy` mode uses an `uid` based distribution (non-uniform). `round-robin` uses an equal distribution across all shards. The `--sharding-method` parameter can also be overriden by setting the key `controller.sharding.algorithm` in the `argocd-cmd-params-cm` `configMap` (preferably) or by setting the `ARGOCD_CONTROLLER_SHARDING_ALGORITHM` environment variable and by specifiying the same possible values. +* The shard distribution algorithm of the `argocd-application-controller` can be set by using the `--sharding-method` parameter. Supported sharding methods are : [legacy (default), round-robin]. `legacy` mode uses an `uid` based distribution (non-uniform). `round-robin` uses an equal distribution across all shards. The `--sharding-method` parameter can also be overridden by setting the key `controller.sharding.algorithm` in the `argocd-cmd-params-cm` `configMap` (preferably) or by setting the `ARGOCD_CONTROLLER_SHARDING_ALGORITHM` environment variable and by specifiying the same possible values. !!! warning "Alpha Feature" The `round-robin` shard distribution algorithm is an experimental feature. Reshuffling is known to occur in certain scenarios with cluster removal. If the cluster at rank-0 is removed, reshuffling all clusters across shards will occur and may temporarily have negative performance impacts. diff --git a/docs/operator-manual/ingress.md b/docs/operator-manual/ingress.md index 584779c5271d0..c13a18fbe3f5b 100644 --- a/docs/operator-manual/ingress.md +++ b/docs/operator-manual/ingress.md @@ -492,7 +492,7 @@ spec: - --staticassets - /shared/app - --redis - - argocd-redis-ha-haproxy:6379 + - argocd-redis:6379 - --insecure - --basehref - /argocd @@ -510,7 +510,7 @@ After that install Argo CD (there should be only 3 yml file defined above in cu kubectl apply -k ./ -n argocd --wait=true ``` -Be sure you create secret for Isito ( in our case secretname is argocd-server-tls on argocd Namespace). After that we create Istio Resources +Be sure you create secret for Istio ( in our case secretname is argocd-server-tls on argocd Namespace). After that we create Istio Resources ```yaml apiVersion: networking.istio.io/v1alpha3 diff --git a/docs/operator-manual/server-commands/argocd-repo-server.md b/docs/operator-manual/server-commands/argocd-repo-server.md index 189adbbc3370b..3532fc6c30b4a 100644 --- a/docs/operator-manual/server-commands/argocd-repo-server.md +++ b/docs/operator-manual/server-commands/argocd-repo-server.md @@ -23,6 +23,7 @@ argocd-repo-server [flags] --helm-manifest-max-extracted-size string Maximum size of helm manifest archives when extracted (default "1G") --helm-registry-max-index-size string Maximum size of registry index file (default "1G") -h, --help help for argocd-repo-server + --include-hidden-directories Include hidden directories from Git --logformat string Set the logging format. One of: text|json (default "text") --loglevel string Set the logging level. One of: debug|info|warn|error (default "info") --max-combined-directory-manifests-size string Max combined size of manifest files in a directory-type Application (default "10M") diff --git a/docs/proposals/application-name-identifier.md b/docs/proposals/application-name-identifier.md index 3d425e9432dbc..0554c4139b817 100644 --- a/docs/proposals/application-name-identifier.md +++ b/docs/proposals/application-name-identifier.md @@ -31,7 +31,7 @@ managed (i.e. reconciled from Git). The default label used is the well-known label `app.kubernetes.io/instance`. This proposal suggests to introduce the `trackingMethod` setting that allows -controlling how applicaton resources are identified and allows switching to +controlling how application resources are identified and allows switching to using the annotation instead of `app.kubernetes.io/instance` label. ## Motivation diff --git a/docs/snyk/index.md b/docs/snyk/index.md index d532fec3a34a3..1e02829a1cdf6 100644 --- a/docs/snyk/index.md +++ b/docs/snyk/index.md @@ -17,50 +17,47 @@ recent minor releases. | [ui/yarn.lock](master/argocd-test.html) | 0 | 0 | 1 | 0 | | [dex:v2.38.0](master/ghcr.io_dexidp_dex_v2.38.0.html) | 0 | 0 | 6 | 3 | | [haproxy:2.6.14-alpine](master/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html) | 0 | 1 | 4 | 3 | -| [redis:7.0.15-alpine](master/public.ecr.aws_docker_library_redis_7.0.15-alpine.html) | 0 | 0 | 4 | 1 | +| [redis:7.0.15-alpine](master/public.ecr.aws_docker_library_redis_7.0.15-alpine.html) | 0 | 0 | 0 | 0 | | [argocd:latest](master/quay.io_argoproj_argocd_latest.html) | 0 | 0 | 3 | 9 | -| [redis:7.0.15-alpine](master/redis_7.0.15-alpine.html) | 0 | 0 | 4 | 1 | +| [redis:7.0.15-alpine](master/redis_7.0.15-alpine.html) | 0 | 0 | 0 | 0 | | [install.yaml](master/argocd-iac-install.html) | - | - | - | - | | [namespace-install.yaml](master/argocd-iac-namespace-install.html) | - | - | - | - | -### v2.11.1 +### v2.11.2 | | Critical | High | Medium | Low | |---:|:--------:|:----:|:------:|:---:| -| [go.mod](v2.11.1/argocd-test.html) | 0 | 1 | 6 | 0 | -| [ui/yarn.lock](v2.11.1/argocd-test.html) | 0 | 0 | 1 | 0 | -| [dex:v2.38.0](v2.11.1/ghcr.io_dexidp_dex_v2.38.0.html) | 0 | 0 | 6 | 3 | -| [haproxy:2.6.14-alpine](v2.11.1/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html) | 0 | 1 | 4 | 3 | -| [redis:7.0.14-alpine](v2.11.1/public.ecr.aws_docker_library_redis_7.0.14-alpine.html) | 0 | 0 | 6 | 3 | -| [argocd:v2.11.1](v2.11.1/quay.io_argoproj_argocd_v2.11.1.html) | 0 | 0 | 3 | 16 | -| [redis:7.0.14-alpine](v2.11.1/redis_7.0.14-alpine.html) | 0 | 0 | 6 | 3 | -| [install.yaml](v2.11.1/argocd-iac-install.html) | - | - | - | - | -| [namespace-install.yaml](v2.11.1/argocd-iac-namespace-install.html) | - | - | - | - | +| [go.mod](v2.11.2/argocd-test.html) | 0 | 1 | 6 | 0 | +| [ui/yarn.lock](v2.11.2/argocd-test.html) | 0 | 0 | 1 | 0 | +| [dex:v2.38.0](v2.11.2/ghcr.io_dexidp_dex_v2.38.0.html) | 0 | 0 | 6 | 3 | +| [haproxy:2.6.14-alpine](v2.11.2/haproxy_2.6.14-alpine.html) | 0 | 1 | 4 | 3 | +| [argocd:v2.11.2](v2.11.2/quay.io_argoproj_argocd_v2.11.2.html) | 0 | 0 | 3 | 16 | +| [redis:7.0.14-alpine](v2.11.2/redis_7.0.14-alpine.html) | 0 | 0 | 6 | 3 | +| [install.yaml](v2.11.2/argocd-iac-install.html) | - | - | - | - | +| [namespace-install.yaml](v2.11.2/argocd-iac-namespace-install.html) | - | - | - | - | -### v2.10.10 +### v2.10.11 | | Critical | High | Medium | Low | |---:|:--------:|:----:|:------:|:---:| -| [go.mod](v2.10.10/argocd-test.html) | 0 | 1 | 7 | 0 | -| [ui/yarn.lock](v2.10.10/argocd-test.html) | 0 | 0 | 1 | 0 | -| [dex:v2.37.0](v2.10.10/ghcr.io_dexidp_dex_v2.37.0.html) | 1 | 1 | 7 | 3 | -| [haproxy:2.6.14-alpine](v2.10.10/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html) | 0 | 1 | 4 | 3 | -| [redis:7.0.15-alpine](v2.10.10/public.ecr.aws_docker_library_redis_7.0.15-alpine.html) | 0 | 0 | 4 | 1 | -| [argocd:v2.10.10](v2.10.10/quay.io_argoproj_argocd_v2.10.10.html) | 0 | 0 | 3 | 16 | -| [redis:7.0.15-alpine](v2.10.10/redis_7.0.15-alpine.html) | 0 | 0 | 4 | 1 | -| [install.yaml](v2.10.10/argocd-iac-install.html) | - | - | - | - | -| [namespace-install.yaml](v2.10.10/argocd-iac-namespace-install.html) | - | - | - | - | +| [go.mod](v2.10.11/argocd-test.html) | 0 | 1 | 7 | 0 | +| [ui/yarn.lock](v2.10.11/argocd-test.html) | 0 | 0 | 1 | 0 | +| [dex:v2.37.0](v2.10.11/ghcr.io_dexidp_dex_v2.37.0.html) | 1 | 1 | 7 | 3 | +| [haproxy:2.6.14-alpine](v2.10.11/haproxy_2.6.14-alpine.html) | 0 | 1 | 4 | 3 | +| [argocd:v2.10.11](v2.10.11/quay.io_argoproj_argocd_v2.10.11.html) | 0 | 0 | 3 | 16 | +| [redis:7.0.15-alpine](v2.10.11/redis_7.0.15-alpine.html) | 0 | 0 | 0 | 0 | +| [install.yaml](v2.10.11/argocd-iac-install.html) | - | - | - | - | +| [namespace-install.yaml](v2.10.11/argocd-iac-namespace-install.html) | - | - | - | - | -### v2.9.15 +### v2.9.16 | | Critical | High | Medium | Low | |---:|:--------:|:----:|:------:|:---:| -| [go.mod](v2.9.15/argocd-test.html) | 0 | 2 | 7 | 0 | -| [ui/yarn.lock](v2.9.15/argocd-test.html) | 0 | 0 | 1 | 0 | -| [dex:v2.37.0](v2.9.15/ghcr.io_dexidp_dex_v2.37.0.html) | 1 | 1 | 7 | 3 | -| [haproxy:2.6.14-alpine](v2.9.15/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html) | 0 | 1 | 4 | 3 | -| [redis:7.0.15-alpine](v2.9.15/public.ecr.aws_docker_library_redis_7.0.15-alpine.html) | 0 | 0 | 4 | 1 | -| [argocd:v2.9.15](v2.9.15/quay.io_argoproj_argocd_v2.9.15.html) | 0 | 0 | 3 | 16 | -| [redis:7.0.15-alpine](v2.9.15/redis_7.0.15-alpine.html) | 0 | 0 | 4 | 1 | -| [install.yaml](v2.9.15/argocd-iac-install.html) | - | - | - | - | -| [namespace-install.yaml](v2.9.15/argocd-iac-namespace-install.html) | - | - | - | - | +| [go.mod](v2.9.16/argocd-test.html) | 0 | 2 | 7 | 0 | +| [ui/yarn.lock](v2.9.16/argocd-test.html) | 0 | 0 | 1 | 0 | +| [dex:v2.37.0](v2.9.16/ghcr.io_dexidp_dex_v2.37.0.html) | 1 | 1 | 7 | 3 | +| [haproxy:2.6.14-alpine](v2.9.16/haproxy_2.6.14-alpine.html) | 0 | 1 | 4 | 3 | +| [argocd:v2.9.16](v2.9.16/quay.io_argoproj_argocd_v2.9.16.html) | 0 | 0 | 3 | 16 | +| [redis:7.0.15-alpine](v2.9.16/redis_7.0.15-alpine.html) | 0 | 0 | 0 | 0 | +| [install.yaml](v2.9.16/argocd-iac-install.html) | - | - | - | - | +| [namespace-install.yaml](v2.9.16/argocd-iac-namespace-install.html) | - | - | - | - | diff --git a/docs/snyk/master/argocd-iac-install.html b/docs/snyk/master/argocd-iac-install.html index 350d3d6b3f96f..b6717dac7c68b 100644 --- a/docs/snyk/master/argocd-iac-install.html +++ b/docs/snyk/master/argocd-iac-install.html @@ -456,7 +456,7 @@

Snyk test report

-

May 22nd 2024, 5:03:32 pm (UTC+00:00)

+

May 26th 2024, 12:17:52 am (UTC+00:00)

Scanned the following path: @@ -507,7 +507,7 @@

Role or ClusterRole with dangerous permissions

  • - Line number: 21094 + Line number: 21098
    • @@ -553,7 +553,7 @@

    Role or ClusterRole with dangerous permissions

  • - Line number: 20779 + Line number: 20783
    • @@ -599,7 +599,7 @@

    Role or ClusterRole with dangerous permissions

  • - Line number: 20864 + Line number: 20868
    • @@ -645,7 +645,7 @@

    Role or ClusterRole with dangerous permissions

  • - Line number: 20892 + Line number: 20896
    • @@ -691,7 +691,7 @@

    Role or ClusterRole with dangerous permissions

  • - Line number: 20922 + Line number: 20926
    • @@ -737,7 +737,7 @@

    Role or ClusterRole with dangerous permissions

  • - Line number: 20940 + Line number: 20944
    • @@ -783,7 +783,7 @@

    Role or ClusterRole with dangerous permissions

  • - Line number: 20958 + Line number: 20962
    • @@ -829,7 +829,7 @@

    Role or ClusterRole with dangerous permissions

  • - Line number: 20980 + Line number: 20984
    • @@ -881,7 +881,7 @@

    Container could be running with outdated image

  • - Line number: 22026 + Line number: 22030
    • @@ -933,7 +933,7 @@

    Container could be running with outdated image

  • - Line number: 22319 + Line number: 22323
    • @@ -991,7 +991,7 @@

    Container has no CPU limit

  • - Line number: 21587 + Line number: 21591
    • @@ -1049,7 +1049,7 @@

    Container has no CPU limit

  • - Line number: 21838 + Line number: 21842
    • @@ -1107,7 +1107,7 @@

    Container has no CPU limit

  • - Line number: 21804 + Line number: 21808
    • @@ -1165,7 +1165,7 @@

    Container has no CPU limit

  • - Line number: 21898 + Line number: 21902
    • @@ -1223,7 +1223,7 @@

    Container has no CPU limit

  • - Line number: 21997 + Line number: 22001
    • @@ -1281,7 +1281,7 @@

    Container has no CPU limit

  • - Line number: 22021 + Line number: 22025
    • @@ -1339,7 +1339,7 @@

    Container has no CPU limit

  • - Line number: 22319 + Line number: 22323
    • @@ -1397,7 +1397,7 @@

    Container has no CPU limit

  • - Line number: 22078 + Line number: 22082
    • @@ -1455,7 +1455,7 @@

    Container has no CPU limit

  • - Line number: 22404 + Line number: 22408
    • @@ -1513,7 +1513,7 @@

    Container has no CPU limit

  • - Line number: 22755 + Line number: 22759
    • @@ -1565,7 +1565,7 @@

    Container is running with multiple open ports

  • - Line number: 21818 + Line number: 21822
    • @@ -1617,7 +1617,7 @@

    Container is running without liveness probe

  • - Line number: 21587 + Line number: 21591
    • @@ -1669,7 +1669,7 @@

    Container is running without liveness probe

  • - Line number: 21804 + Line number: 21808
    • @@ -1721,7 +1721,7 @@

    Container is running without liveness probe

  • - Line number: 21997 + Line number: 22001
    • @@ -1779,7 +1779,7 @@

    Container is running without memory limit

  • - Line number: 21587 + Line number: 21591
    • @@ -1837,7 +1837,7 @@

    Container is running without memory limit

  • - Line number: 21804 + Line number: 21808
    • @@ -1895,7 +1895,7 @@

    Container is running without memory limit

  • - Line number: 21838 + Line number: 21842
    • @@ -1953,7 +1953,7 @@

    Container is running without memory limit

  • - Line number: 21898 + Line number: 21902
    • @@ -2011,7 +2011,7 @@

    Container is running without memory limit

  • - Line number: 21997 + Line number: 22001
    • @@ -2069,7 +2069,7 @@

    Container is running without memory limit

  • - Line number: 22021 + Line number: 22025
    • @@ -2127,7 +2127,7 @@

    Container is running without memory limit

  • - Line number: 22319 + Line number: 22323
    • @@ -2185,7 +2185,7 @@

    Container is running without memory limit

  • - Line number: 22078 + Line number: 22082
    • @@ -2243,7 +2243,7 @@

    Container is running without memory limit

  • - Line number: 22404 + Line number: 22408
    • @@ -2301,7 +2301,7 @@

    Container is running without memory limit

  • - Line number: 22755 + Line number: 22759
    • @@ -2357,7 +2357,7 @@

    Container's or Pod's UID could clash with hos
  • - Line number: 21728 + Line number: 21732
    • @@ -2413,7 +2413,7 @@

    Container's or Pod's UID could clash with hos
  • - Line number: 21846 + Line number: 21850
    • @@ -2469,7 +2469,7 @@

    Container's or Pod's UID could clash with hos
  • - Line number: 21821 + Line number: 21825
    • @@ -2525,7 +2525,7 @@

    Container's or Pod's UID could clash with hos
  • - Line number: 21931 + Line number: 21935
    • @@ -2581,7 +2581,7 @@

    Container's or Pod's UID could clash with hos
  • - Line number: 22014 + Line number: 22018
    • @@ -2637,7 +2637,7 @@

    Container's or Pod's UID could clash with hos
  • - Line number: 22028 + Line number: 22032
    • @@ -2693,7 +2693,7 @@

    Container's or Pod's UID could clash with hos
  • - Line number: 22326 + Line number: 22330
    • @@ -2749,7 +2749,7 @@

    Container's or Pod's UID could clash with hos
  • - Line number: 22292 + Line number: 22296
    • @@ -2805,7 +2805,7 @@

    Container's or Pod's UID could clash with hos
  • - Line number: 22665 + Line number: 22669
    • @@ -2861,7 +2861,7 @@

    Container's or Pod's UID could clash with hos
  • - Line number: 22956 + Line number: 22960
    • diff --git a/docs/snyk/master/argocd-iac-namespace-install.html b/docs/snyk/master/argocd-iac-namespace-install.html index 70695124c9889..54c52fab97d7f 100644 --- a/docs/snyk/master/argocd-iac-namespace-install.html +++ b/docs/snyk/master/argocd-iac-namespace-install.html @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:03:42 pm (UTC+00:00)

    +

    May 26th 2024, 12:18:02 am (UTC+00:00)

    Scanned the following path: diff --git a/docs/snyk/master/argocd-test.html b/docs/snyk/master/argocd-test.html index f33e36bcbf52e..e01fc71d84551 100644 --- a/docs/snyk/master/argocd-test.html +++ b/docs/snyk/master/argocd-test.html @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:01:16 pm (UTC+00:00)

    +

    May 26th 2024, 12:15:49 am (UTC+00:00)

    Scanned the following paths: @@ -469,7 +469,7 @@

    Snyk test report

    7 known vulnerabilities
    25 vulnerable dependency paths
    -
    2056 dependencies
    +
    2057 dependencies
    diff --git a/docs/snyk/master/ghcr.io_dexidp_dex_v2.38.0.html b/docs/snyk/master/ghcr.io_dexidp_dex_v2.38.0.html index b3412460159e8..4f9e44f66e9bd 100644 --- a/docs/snyk/master/ghcr.io_dexidp_dex_v2.38.0.html +++ b/docs/snyk/master/ghcr.io_dexidp_dex_v2.38.0.html @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:01:30 pm (UTC+00:00)

    +

    May 26th 2024, 12:15:58 am (UTC+00:00)

    Scanned the following paths: diff --git a/docs/snyk/master/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html b/docs/snyk/master/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html index 5d3b26c504d2c..7ada82538ba93 100644 --- a/docs/snyk/master/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html +++ b/docs/snyk/master/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:01:37 pm (UTC+00:00)

    +

    May 26th 2024, 12:16:05 am (UTC+00:00)

    Scanned the following path: diff --git a/docs/snyk/master/public.ecr.aws_docker_library_redis_7.0.15-alpine.html b/docs/snyk/master/public.ecr.aws_docker_library_redis_7.0.15-alpine.html index da89cf9408af8..43905d3a524dd 100644 --- a/docs/snyk/master/public.ecr.aws_docker_library_redis_7.0.15-alpine.html +++ b/docs/snyk/master/public.ecr.aws_docker_library_redis_7.0.15-alpine.html @@ -7,7 +7,7 @@ Snyk test report - + @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:01:45 pm (UTC+00:00)

    +

    May 26th 2024, 12:16:11 am (UTC+00:00)

    Scanned the following paths: @@ -467,629 +467,16 @@

    Snyk test report

    -
    5 known vulnerabilities
    -
    29 vulnerable dependency paths
    -
    19 dependencies
    +
    0 known vulnerabilities
    +
    0 vulnerable dependency paths
    +
    18 dependencies
    -
    -
    -

    Out-of-bounds Write

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r16 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    CVE-2024-4603

    -
    - -
    - low severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - openssl/libcrypto3 -
      • - -
    • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and openssl/libcrypto3@3.1.4-r6 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    Issue summary: Checking excessively long DSA keys or parameters may be very - slow.

    -

    Impact summary: Applications that use the functions EVP_PKEY_param_check() - or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may - experience long delays. Where the key or parameters that are being checked - have been obtained from an untrusted source this may lead to a Denial of - Service.

    -

    The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform - various checks on DSA parameters. Some of those computations take a long time - if the modulus (p parameter) is too large.

    -

    Trying to use a very large modulus is slow and OpenSSL will not allow using - public keys with a modulus which is over 10,000 bits in length for signature - verification. However the key and parameter check functions do not limit - the modulus size when performing the checks.

    -

    An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check() - and supplies a key or parameters obtained from an untrusted source could be - vulnerable to a Denial of Service attack.

    -

    These functions are not called by OpenSSL itself on untrusted DSA keys so - only applications that directly call these functions may be vulnerable.

    -

    Also vulnerable are the OpenSSL pkey and pkeyparam command line applications - when using the -check option.

    -

    The OpenSSL SSL/TLS implementation is not affected by this issue.

    -

    The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.

    -

    Remediation

    -

    Upgrade Alpine:3.19 openssl to version 3.1.5-r0 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    + No known vulnerabilities detected.
    diff --git a/docs/snyk/master/quay.io_argoproj_argocd_latest.html b/docs/snyk/master/quay.io_argoproj_argocd_latest.html index 9174104a92b1e..836b9fc9fd08e 100644 --- a/docs/snyk/master/quay.io_argoproj_argocd_latest.html +++ b/docs/snyk/master/quay.io_argoproj_argocd_latest.html @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:02:03 pm (UTC+00:00)

    +

    May 26th 2024, 12:16:30 am (UTC+00:00)

    Scanned the following paths: @@ -1678,6 +1678,7 @@

    References

  • https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/
  • https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/
  • https://access.redhat.com/errata/RHSA-2024:2463
    • +
  • https://access.redhat.com/errata/RHSA-2024:3203
    • diff --git a/docs/snyk/master/redis_7.0.15-alpine.html b/docs/snyk/master/redis_7.0.15-alpine.html index 8c3aae4d38e19..45e9a02784a5a 100644 --- a/docs/snyk/master/redis_7.0.15-alpine.html +++ b/docs/snyk/master/redis_7.0.15-alpine.html @@ -7,7 +7,7 @@ Snyk test report - + @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:02:08 pm (UTC+00:00)

    +

    May 26th 2024, 12:16:35 am (UTC+00:00)

    Scanned the following paths: @@ -467,629 +467,16 @@

    Snyk test report

    -
    5 known vulnerabilities
    -
    29 vulnerable dependency paths
    -
    19 dependencies
    +
    0 known vulnerabilities
    +
    0 vulnerable dependency paths
    +
    18 dependencies
    -
    -
    -

    Out-of-bounds Write

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r16 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    CVE-2024-4603

    -
    - -
    - low severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - openssl/libcrypto3 -
      • - -
    • Introduced through: - - docker-image|redis@7.0.15-alpine and openssl/libcrypto3@3.1.4-r6 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    Issue summary: Checking excessively long DSA keys or parameters may be very - slow.

    -

    Impact summary: Applications that use the functions EVP_PKEY_param_check() - or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may - experience long delays. Where the key or parameters that are being checked - have been obtained from an untrusted source this may lead to a Denial of - Service.

    -

    The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform - various checks on DSA parameters. Some of those computations take a long time - if the modulus (p parameter) is too large.

    -

    Trying to use a very large modulus is slow and OpenSSL will not allow using - public keys with a modulus which is over 10,000 bits in length for signature - verification. However the key and parameter check functions do not limit - the modulus size when performing the checks.

    -

    An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check() - and supplies a key or parameters obtained from an untrusted source could be - vulnerable to a Denial of Service attack.

    -

    These functions are not called by OpenSSL itself on untrusted DSA keys so - only applications that directly call these functions may be vulnerable.

    -

    Also vulnerable are the OpenSSL pkey and pkeyparam command line applications - when using the -check option.

    -

    The OpenSSL SSL/TLS implementation is not affected by this issue.

    -

    The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.

    -

    Remediation

    -

    Upgrade Alpine:3.19 openssl to version 3.1.5-r0 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    + No known vulnerabilities detected.
    diff --git a/docs/snyk/v2.10.10/public.ecr.aws_docker_library_redis_7.0.15-alpine.html b/docs/snyk/v2.10.10/public.ecr.aws_docker_library_redis_7.0.15-alpine.html deleted file mode 100644 index 61b90d45dcde7..0000000000000 --- a/docs/snyk/v2.10.10/public.ecr.aws_docker_library_redis_7.0.15-alpine.html +++ /dev/null @@ -1,1097 +0,0 @@ - - - - - - - - - Snyk test report - - - - - - - - - -
    -
    -
    -
    - - - Snyk - Open Source Security - - - - - - - -
    -

    Snyk test report

    - -

    May 22nd 2024, 5:06:40 pm (UTC+00:00)

    -
    -
    - Scanned the following paths: -
      -
    • public.ecr.aws/docker/library/redis:7.0.15-alpine/docker/library/redis (apk)
      • -
    • public.ecr.aws/docker/library/redis:7.0.15-alpine/tianon/gosu//usr/local/bin/gosu (gomodules)
      • -
    -
    - -
    -
    5 known vulnerabilities
    -
    29 vulnerable dependency paths
    -
    19 dependencies
    -
    -
    -
    -
    - -
    -
    -
    -

    Out-of-bounds Write

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r16 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    CVE-2024-4603

    -
    - -
    - low severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - openssl/libcrypto3 -
      • - -
    • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and openssl/libcrypto3@3.1.4-r6 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    Issue summary: Checking excessively long DSA keys or parameters may be very - slow.

    -

    Impact summary: Applications that use the functions EVP_PKEY_param_check() - or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may - experience long delays. Where the key or parameters that are being checked - have been obtained from an untrusted source this may lead to a Denial of - Service.

    -

    The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform - various checks on DSA parameters. Some of those computations take a long time - if the modulus (p parameter) is too large.

    -

    Trying to use a very large modulus is slow and OpenSSL will not allow using - public keys with a modulus which is over 10,000 bits in length for signature - verification. However the key and parameter check functions do not limit - the modulus size when performing the checks.

    -

    An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check() - and supplies a key or parameters obtained from an untrusted source could be - vulnerable to a Denial of Service attack.

    -

    These functions are not called by OpenSSL itself on untrusted DSA keys so - only applications that directly call these functions may be vulnerable.

    -

    Also vulnerable are the OpenSSL pkey and pkeyparam command line applications - when using the -check option.

    -

    The OpenSSL SSL/TLS implementation is not affected by this issue.

    -

    The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.

    -

    Remediation

    -

    Upgrade Alpine:3.19 openssl to version 3.1.5-r0 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -
    -
    - - - diff --git a/docs/snyk/v2.10.10/redis_7.0.15-alpine.html b/docs/snyk/v2.10.10/redis_7.0.15-alpine.html deleted file mode 100644 index d53bee0d5f389..0000000000000 --- a/docs/snyk/v2.10.10/redis_7.0.15-alpine.html +++ /dev/null @@ -1,1097 +0,0 @@ - - - - - - - - - Snyk test report - - - - - - - - - -
    -
    -
    -
    - - - Snyk - Open Source Security - - - - - - - -
    -

    Snyk test report

    - -

    May 22nd 2024, 5:07:07 pm (UTC+00:00)

    -
    -
    - Scanned the following paths: -
      -
    • redis:7.0.15-alpine (apk)
      • -
    • redis:7.0.15-alpine/tianon/gosu//usr/local/bin/gosu (gomodules)
      • -
    -
    - -
    -
    5 known vulnerabilities
    -
    29 vulnerable dependency paths
    -
    19 dependencies
    -
    -
    -
    -
    - -
    -
    -
    -

    Out-of-bounds Write

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r16 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    Use After Free

    -
    - -
    - medium severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - busybox/busybox -
      • - -
    • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.

    -

    Remediation

    -

    Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -

    CVE-2024-4603

    -
    - -
    - low severity -
    - -
    - -
      -
    • - Package Manager: alpine:3.19 -
      • -
    • - Vulnerable module: - - openssl/libcrypto3 -
      • - -
    • Introduced through: - - docker-image|redis@7.0.15-alpine and openssl/libcrypto3@3.1.4-r6 - -
      • -
    - -
    - - -

    Detailed paths

    - -
      -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - › - openssl/libcrypto3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r6 - - - -
      • -
    - -
    - -
    - -

    NVD Description

    -

    Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

    -

    Issue summary: Checking excessively long DSA keys or parameters may be very - slow.

    -

    Impact summary: Applications that use the functions EVP_PKEY_param_check() - or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may - experience long delays. Where the key or parameters that are being checked - have been obtained from an untrusted source this may lead to a Denial of - Service.

    -

    The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform - various checks on DSA parameters. Some of those computations take a long time - if the modulus (p parameter) is too large.

    -

    Trying to use a very large modulus is slow and OpenSSL will not allow using - public keys with a modulus which is over 10,000 bits in length for signature - verification. However the key and parameter check functions do not limit - the modulus size when performing the checks.

    -

    An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check() - and supplies a key or parameters obtained from an untrusted source could be - vulnerable to a Denial of Service attack.

    -

    These functions are not called by OpenSSL itself on untrusted DSA keys so - only applications that directly call these functions may be vulnerable.

    -

    Also vulnerable are the OpenSSL pkey and pkeyparam command line applications - when using the -check option.

    -

    The OpenSSL SSL/TLS implementation is not affected by this issue.

    -

    The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.

    -

    Remediation

    -

    Upgrade Alpine:3.19 openssl to version 3.1.5-r0 or higher.

    -

    References

    - - -
    - -
    -

    More about this vulnerability

    -
    - -
    -
    -
    -
    - - - diff --git a/docs/snyk/v2.10.10/argocd-iac-install.html b/docs/snyk/v2.10.11/argocd-iac-install.html similarity index 99% rename from docs/snyk/v2.10.10/argocd-iac-install.html rename to docs/snyk/v2.10.11/argocd-iac-install.html index a283fc8a34845..e1e9d11316247 100644 --- a/docs/snyk/v2.10.10/argocd-iac-install.html +++ b/docs/snyk/v2.10.11/argocd-iac-install.html @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:08:27 pm (UTC+00:00)

    +

    May 26th 2024, 12:22:28 am (UTC+00:00)

    Scanned the following path: diff --git a/docs/snyk/v2.10.10/argocd-iac-namespace-install.html b/docs/snyk/v2.10.11/argocd-iac-namespace-install.html similarity index 99% rename from docs/snyk/v2.10.10/argocd-iac-namespace-install.html rename to docs/snyk/v2.10.11/argocd-iac-namespace-install.html index 5dfb80f5030bf..25012a4cb5c64 100644 --- a/docs/snyk/v2.10.10/argocd-iac-namespace-install.html +++ b/docs/snyk/v2.10.11/argocd-iac-namespace-install.html @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:08:38 pm (UTC+00:00)

    +

    May 26th 2024, 12:22:37 am (UTC+00:00)

    Scanned the following path: diff --git a/docs/snyk/v2.10.10/argocd-test.html b/docs/snyk/v2.10.11/argocd-test.html similarity index 99% rename from docs/snyk/v2.10.10/argocd-test.html rename to docs/snyk/v2.10.11/argocd-test.html index 70ec92d9d082e..c871aa7de7992 100644 --- a/docs/snyk/v2.10.10/argocd-test.html +++ b/docs/snyk/v2.10.11/argocd-test.html @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:06:24 pm (UTC+00:00)

    +

    May 26th 2024, 12:20:34 am (UTC+00:00)

    Scanned the following paths: @@ -850,7 +850,7 @@

    Detailed paths

    Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › - go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@0.42.0 + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@0.46.1 › google.golang.org/grpc@1.59.0 › diff --git a/docs/snyk/v2.9.15/ghcr.io_dexidp_dex_v2.37.0.html b/docs/snyk/v2.10.11/ghcr.io_dexidp_dex_v2.37.0.html similarity index 99% rename from docs/snyk/v2.9.15/ghcr.io_dexidp_dex_v2.37.0.html rename to docs/snyk/v2.10.11/ghcr.io_dexidp_dex_v2.37.0.html index 6fd5710dc4f9e..d7efab9b56d31 100644 --- a/docs/snyk/v2.9.15/ghcr.io_dexidp_dex_v2.37.0.html +++ b/docs/snyk/v2.10.11/ghcr.io_dexidp_dex_v2.37.0.html @@ -456,7 +456,7 @@

    Snyk test report

    -

    May 22nd 2024, 5:09:03 pm (UTC+00:00)

    +

    May 26th 2024, 12:20:43 am (UTC+00:00)

    Scanned the following paths: diff --git a/docs/snyk/v2.9.15/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html b/docs/snyk/v2.10.11/haproxy_2.6.14-alpine.html similarity index 91% rename from docs/snyk/v2.9.15/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html rename to docs/snyk/v2.10.11/haproxy_2.6.14-alpine.html index 9e4431f35ff31..c44884db9d736 100644 --- a/docs/snyk/v2.9.15/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html +++ b/docs/snyk/v2.10.11/haproxy_2.6.14-alpine.html @@ -456,12 +456,12 @@

    Snyk test report

    -

    May 22nd 2024, 5:09:09 pm (UTC+00:00)

    +

    May 26th 2024, 12:20:47 am (UTC+00:00)

    Scanned the following path:
      -
    • public.ecr.aws/docker/library/haproxy:2.6.14-alpine/docker/library/haproxy (apk)
      • +
    • haproxy:2.6.14-alpine (apk)
    @@ -476,8 +476,8 @@

    Snyk test report

    - - + + @@ -507,7 +507,7 @@

    CVE-2023-5363

  • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    • @@ -520,7 +520,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -529,7 +529,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -540,7 +540,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -551,7 +551,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -562,7 +562,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -575,7 +575,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -584,7 +584,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -595,7 +595,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -606,7 +606,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -699,7 +699,7 @@

      Improper Check for Unusual or Exceptional Conditions

      Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -712,7 +712,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -721,7 +721,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -732,7 +732,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -743,7 +743,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -754,7 +754,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -767,7 +767,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -776,7 +776,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -787,7 +787,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -798,7 +798,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -883,7 +883,7 @@

      Out-of-bounds Write

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -896,7 +896,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -905,7 +905,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -916,7 +916,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -927,7 +927,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -938,7 +938,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -951,7 +951,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -960,7 +960,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -971,7 +971,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -982,7 +982,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1072,7 +1072,7 @@

      CVE-2024-0727

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1085,7 +1085,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1094,7 +1094,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1105,7 +1105,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1116,7 +1116,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1127,7 +1127,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1140,7 +1140,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1149,7 +1149,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1160,7 +1160,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1171,7 +1171,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1248,7 +1248,7 @@

      Out-of-bounds Write

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and busybox/busybox@1.36.1-r2 + docker-image|haproxy@2.6.14-alpine and busybox/busybox@1.36.1-r2
    @@ -1261,7 +1261,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/busybox@1.36.1-r2 @@ -1270,7 +1270,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › alpine-baselayout/alpine-baselayout@3.4.3-r1 › @@ -1283,7 +1283,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/busybox-binsh@1.36.1-r2 @@ -1292,7 +1292,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › alpine-baselayout/alpine-baselayout@3.4.3-r1 › @@ -1303,7 +1303,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 @@ -1356,7 +1356,7 @@

      CVE-2023-6237

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1369,7 +1369,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1378,7 +1378,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1389,7 +1389,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1400,7 +1400,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1411,7 +1411,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1424,7 +1424,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1433,7 +1433,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1444,7 +1444,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1455,7 +1455,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1533,7 +1533,7 @@

      CVE-2024-2511

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1546,7 +1546,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1555,7 +1555,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1566,7 +1566,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1577,7 +1577,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1588,7 +1588,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1601,7 +1601,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1610,7 +1610,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1621,7 +1621,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1632,7 +1632,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1707,7 +1707,7 @@

      CVE-2024-4603

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1720,7 +1720,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1729,7 +1729,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1740,7 +1740,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1751,7 +1751,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1762,7 +1762,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1775,7 +1775,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1784,7 +1784,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1795,7 +1795,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1806,7 +1806,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › diff --git a/docs/snyk/v2.10.10/quay.io_argoproj_argocd_v2.10.10.html b/docs/snyk/v2.10.11/quay.io_argoproj_argocd_v2.10.11.html similarity index 97% rename from docs/snyk/v2.10.10/quay.io_argoproj_argocd_v2.10.10.html rename to docs/snyk/v2.10.11/quay.io_argoproj_argocd_v2.10.11.html index 5d1ae7879d46c..3e89be0bbf5cc 100644 --- a/docs/snyk/v2.10.10/quay.io_argoproj_argocd_v2.10.10.html +++ b/docs/snyk/v2.10.11/quay.io_argoproj_argocd_v2.10.11.html @@ -456,16 +456,16 @@

      Snyk test report

      -

      May 22nd 2024, 5:07:01 pm (UTC+00:00)

      +

      May 26th 2024, 12:21:06 am (UTC+00:00)

      Scanned the following paths:
        -
      • quay.io/argoproj/argocd:v2.10.10/argoproj/argocd/Dockerfile (deb)
        • -
      • quay.io/argoproj/argocd:v2.10.10/argoproj/argo-cd/v2//usr/local/bin/argocd (gomodules)
        • -
      • quay.io/argoproj/argocd:v2.10.10//usr/local/bin/kustomize (gomodules)
        • -
      • quay.io/argoproj/argocd:v2.10.10/helm/v3//usr/local/bin/helm (gomodules)
        • -
      • quay.io/argoproj/argocd:v2.10.10/git-lfs/git-lfs//usr/bin/git-lfs (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.10.11/argoproj/argocd/Dockerfile (deb)
        • +
      • quay.io/argoproj/argocd:v2.10.11/argoproj/argo-cd/v2//usr/local/bin/argocd (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.10.11//usr/local/bin/kustomize (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.10.11/helm/v3//usr/local/bin/helm (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.10.11/git-lfs/git-lfs//usr/bin/git-lfs (gomodules)
      @@ -492,7 +492,7 @@

      Allocation of Resources Without Limits or Throttling

    • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argo-cd/v2 › /usr/local/bin/argocd
    • Package Manager: golang @@ -572,7 +572,7 @@

      CVE-2020-22916

      • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
      • Package Manager: ubuntu:22.04 @@ -585,7 +585,7 @@

        CVE-2020-22916

      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and xz-utils/liblzma5@5.2.5-2ubuntu1 + docker-image|quay.io/argoproj/argocd@v2.10.11 and xz-utils/liblzma5@5.2.5-2ubuntu1
      @@ -598,7 +598,7 @@

      Detailed paths

      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › xz-utils/liblzma5@5.2.5-2ubuntu1 @@ -648,7 +648,7 @@

        Information Exposure

        • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
        • Package Manager: ubuntu:22.04 @@ -661,7 +661,7 @@

          Information Exposure

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and libgcrypt20@1.9.4-3ubuntu3 + docker-image|quay.io/argoproj/argocd@v2.10.11 and libgcrypt20@1.9.4-3ubuntu3
        @@ -674,7 +674,7 @@

        Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › libgcrypt20@1.9.4-3ubuntu3 @@ -683,7 +683,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/dirmngr@2.2.27-3ubuntu2.1 › @@ -694,7 +694,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -705,7 +705,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › apt@2.4.12 › @@ -718,7 +718,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › apt@2.4.12 › @@ -731,7 +731,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -744,7 +744,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -757,7 +757,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -770,7 +770,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -783,7 +783,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -796,7 +796,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -809,7 +809,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › apt@2.4.12 › @@ -861,7 +861,7 @@

          CVE-2024-26462

          • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
          • Package Manager: ubuntu:22.04 @@ -874,7 +874,7 @@

            CVE-2024-26462

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.10.11 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
          @@ -887,7 +887,7 @@

          Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -896,7 +896,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -917,7 +917,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -940,7 +940,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -949,7 +949,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -970,7 +970,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -979,7 +979,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -990,7 +990,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git@1:2.34.1-1ubuntu1.10 › @@ -1003,7 +1003,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git@1:2.34.1-1ubuntu1.10 › @@ -1018,7 +1018,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -1037,7 +1037,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -1082,7 +1082,7 @@

            LGPL-3.0 license

            • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argo-cd/v2 › /usr/local/bin/argocd
            • Package Manager: golang @@ -1142,7 +1142,7 @@

              MPL-2.0 license

              • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argo-cd/v2 › /usr/local/bin/argocd
              • Package Manager: golang @@ -1202,7 +1202,7 @@

                MPL-2.0 license

                • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                • Package Manager: golang @@ -1262,7 +1262,7 @@

                  MPL-2.0 license

                  • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                  • Package Manager: golang @@ -1322,7 +1322,7 @@

                    MPL-2.0 license

                    • - Manifest file: quay.io/argoproj/argocd:v2.10.10/helm/v3 › /usr/local/bin/helm + Manifest file: quay.io/argoproj/argocd:v2.10.11/helm/v3 › /usr/local/bin/helm
                    • Package Manager: golang @@ -1382,7 +1382,7 @@

                      MPL-2.0 license

                      • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                      • Package Manager: golang @@ -1442,7 +1442,7 @@

                        MPL-2.0 license

                        • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                        • Package Manager: golang @@ -1502,7 +1502,7 @@

                          CVE-2023-7008

                          • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                          • Package Manager: ubuntu:22.04 @@ -1515,7 +1515,7 @@

                            CVE-2023-7008

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and systemd/libsystemd0@249.11-0ubuntu3.12 + docker-image|quay.io/argoproj/argocd@v2.10.11 and systemd/libsystemd0@249.11-0ubuntu3.12
                          @@ -1528,7 +1528,7 @@

                          Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › systemd/libsystemd0@249.11-0ubuntu3.12 @@ -1537,7 +1537,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › apt@2.4.12 › @@ -1548,7 +1548,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › procps/libprocps8@2:3.3.17-6ubuntu2.1 › @@ -1559,7 +1559,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › util-linux@2.37.2-4ubuntu3.4 › @@ -1570,7 +1570,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › util-linux/bsdutils@1:2.37.2-4ubuntu3.4 › @@ -1581,7 +1581,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › apt@2.4.12 › @@ -1594,7 +1594,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › systemd/libudev1@249.11-0ubuntu3.12 @@ -1603,7 +1603,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › libfido2/libfido2-1@1.10.0-1 › @@ -1614,7 +1614,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › util-linux@2.37.2-4ubuntu3.4 › @@ -1625,7 +1625,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › apt@2.4.12 › @@ -1658,6 +1658,7 @@

                            References

                          • https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/
                          • https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/
                          • https://access.redhat.com/errata/RHSA-2024:2463
                            • +
                          • https://access.redhat.com/errata/RHSA-2024:3203
                          @@ -1679,7 +1680,7 @@

                          Arbitrary Code Injection

                          • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                          • Package Manager: ubuntu:22.04 @@ -1692,7 +1693,7 @@

                            Arbitrary Code Injection

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and shadow/passwd@1:4.8.1-2ubuntu2.2 + docker-image|quay.io/argoproj/argocd@v2.10.11 and shadow/passwd@1:4.8.1-2ubuntu2.2
                          @@ -1705,7 +1706,7 @@

                          Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › shadow/passwd@1:4.8.1-2ubuntu2.2 @@ -1714,7 +1715,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -1725,7 +1726,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -1736,7 +1737,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › shadow/login@1:4.8.1-2ubuntu2.2 @@ -1783,7 +1784,7 @@

                            Uncontrolled Recursion

                            • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                            • Package Manager: ubuntu:22.04 @@ -1796,7 +1797,7 @@

                              Uncontrolled Recursion

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and pcre3/libpcre3@2:8.39-13ubuntu0.22.04.1 + docker-image|quay.io/argoproj/argocd@v2.10.11 and pcre3/libpcre3@2:8.39-13ubuntu0.22.04.1
                            @@ -1809,7 +1810,7 @@

                            Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › pcre3/libpcre3@2:8.39-13ubuntu0.22.04.1 @@ -1818,7 +1819,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › grep@3.7-1build1 › @@ -1871,7 +1872,7 @@

                              Release of Invalid Pointer or Reference

                              • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                              • Package Manager: ubuntu:22.04 @@ -1884,7 +1885,7 @@

                                Release of Invalid Pointer or Reference

                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and patch@2.7.6-7build2 + docker-image|quay.io/argoproj/argocd@v2.10.11 and patch@2.7.6-7build2
                              @@ -1897,7 +1898,7 @@

                              Detailed paths

                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › patch@2.7.6-7build2 @@ -1941,7 +1942,7 @@

                                Double Free

                                • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                • Package Manager: ubuntu:22.04 @@ -1954,7 +1955,7 @@

                                  Double Free

                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and patch@2.7.6-7build2 + docker-image|quay.io/argoproj/argocd@v2.10.11 and patch@2.7.6-7build2
                                @@ -1967,7 +1968,7 @@

                                Detailed paths

                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › patch@2.7.6-7build2 @@ -2016,7 +2017,7 @@

                                  CVE-2023-50495

                                  • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                  • Package Manager: ubuntu:22.04 @@ -2029,7 +2030,7 @@

                                    CVE-2023-50495

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and ncurses/libtinfo6@6.3-2ubuntu0.1 + docker-image|quay.io/argoproj/argocd@v2.10.11 and ncurses/libtinfo6@6.3-2ubuntu0.1
                                  @@ -2042,7 +2043,7 @@

                                  Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/libtinfo6@6.3-2ubuntu0.1 @@ -2051,7 +2052,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › bash@5.1-6ubuntu1.1 › @@ -2062,7 +2063,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/libncursesw6@6.3-2ubuntu0.1 › @@ -2073,7 +2074,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › less@590-1ubuntu0.22.04.3 › @@ -2084,7 +2085,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › libedit/libedit2@3.1-20210910-1build1 › @@ -2095,7 +2096,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/libncurses6@6.3-2ubuntu0.1 › @@ -2106,7 +2107,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/ncurses-bin@6.3-2ubuntu0.1 › @@ -2117,7 +2118,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › procps@2:3.3.17-6ubuntu2.1 › @@ -2128,7 +2129,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › util-linux@2.37.2-4ubuntu3.4 › @@ -2139,7 +2140,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -2154,7 +2155,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2169,7 +2170,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/libncursesw6@6.3-2ubuntu0.1 @@ -2178,7 +2179,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › procps@2:3.3.17-6ubuntu2.1 › @@ -2189,7 +2190,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2204,7 +2205,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/libncurses6@6.3-2ubuntu0.1 @@ -2213,7 +2214,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › procps@2:3.3.17-6ubuntu2.1 › @@ -2224,7 +2225,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/ncurses-base@6.3-2ubuntu0.1 @@ -2233,7 +2234,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/ncurses-bin@6.3-2ubuntu0.1 @@ -2280,7 +2281,7 @@

                                    CVE-2023-45918

                                    • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                    • Package Manager: ubuntu:22.04 @@ -2293,7 +2294,7 @@

                                      CVE-2023-45918

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and ncurses/libtinfo6@6.3-2ubuntu0.1 + docker-image|quay.io/argoproj/argocd@v2.10.11 and ncurses/libtinfo6@6.3-2ubuntu0.1
                                    @@ -2306,7 +2307,7 @@

                                    Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/libtinfo6@6.3-2ubuntu0.1 @@ -2315,7 +2316,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › bash@5.1-6ubuntu1.1 › @@ -2326,7 +2327,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/libncursesw6@6.3-2ubuntu0.1 › @@ -2337,7 +2338,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › less@590-1ubuntu0.22.04.3 › @@ -2348,7 +2349,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › libedit/libedit2@3.1-20210910-1build1 › @@ -2359,7 +2360,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/libncurses6@6.3-2ubuntu0.1 › @@ -2370,7 +2371,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/ncurses-bin@6.3-2ubuntu0.1 › @@ -2381,7 +2382,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › procps@2:3.3.17-6ubuntu2.1 › @@ -2392,7 +2393,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › util-linux@2.37.2-4ubuntu3.4 › @@ -2403,7 +2404,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -2418,7 +2419,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2433,7 +2434,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/libncursesw6@6.3-2ubuntu0.1 @@ -2442,7 +2443,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › procps@2:3.3.17-6ubuntu2.1 › @@ -2453,7 +2454,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2468,7 +2469,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/libncurses6@6.3-2ubuntu0.1 @@ -2477,7 +2478,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › procps@2:3.3.17-6ubuntu2.1 › @@ -2488,7 +2489,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/ncurses-base@6.3-2ubuntu0.1 @@ -2497,7 +2498,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › ncurses/ncurses-bin@6.3-2ubuntu0.1 @@ -2542,7 +2543,7 @@

                                      Resource Exhaustion

                                      • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                      • Package Manager: ubuntu:22.04 @@ -2555,7 +2556,7 @@

                                        Resource Exhaustion

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and libzstd/libzstd1@1.4.8+dfsg-3build1 + docker-image|quay.io/argoproj/argocd@v2.10.11 and libzstd/libzstd1@1.4.8+dfsg-3build1
                                      @@ -2568,7 +2569,7 @@

                                      Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › libzstd/libzstd1@1.4.8+dfsg-3build1 @@ -2619,7 +2620,7 @@

                                        Integer Overflow or Wraparound

                                        • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                        • Package Manager: ubuntu:22.04 @@ -2632,7 +2633,7 @@

                                          Integer Overflow or Wraparound

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.10.11 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
                                        @@ -2645,7 +2646,7 @@

                                        Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -2654,7 +2655,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -2675,7 +2676,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -2698,7 +2699,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -2707,7 +2708,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -2728,7 +2729,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -2737,7 +2738,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -2748,7 +2749,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git@1:2.34.1-1ubuntu1.10 › @@ -2761,7 +2762,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git@1:2.34.1-1ubuntu1.10 › @@ -2776,7 +2777,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -2795,7 +2796,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -2843,7 +2844,7 @@

                                          CVE-2024-26461

                                          • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                          • Package Manager: ubuntu:22.04 @@ -2856,7 +2857,7 @@

                                            CVE-2024-26461

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.10.11 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
                                          @@ -2869,7 +2870,7 @@

                                          Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -2878,7 +2879,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -2899,7 +2900,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -2922,7 +2923,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -2931,7 +2932,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -2952,7 +2953,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -2961,7 +2962,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -2972,7 +2973,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git@1:2.34.1-1ubuntu1.10 › @@ -2985,7 +2986,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git@1:2.34.1-1ubuntu1.10 › @@ -3000,7 +3001,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -3019,7 +3020,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -3064,7 +3065,7 @@

                                            CVE-2024-26458

                                            • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                            • Package Manager: ubuntu:22.04 @@ -3077,7 +3078,7 @@

                                              CVE-2024-26458

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.10.11 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
                                            @@ -3090,7 +3091,7 @@

                                            Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -3099,7 +3100,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -3120,7 +3121,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -3143,7 +3144,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -3152,7 +3153,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -3173,7 +3174,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -3182,7 +3183,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -3193,7 +3194,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git@1:2.34.1-1ubuntu1.10 › @@ -3206,7 +3207,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git@1:2.34.1-1ubuntu1.10 › @@ -3221,7 +3222,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › adduser@3.118ubuntu5 › @@ -3240,7 +3241,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -3285,7 +3286,7 @@

                                              Out-of-bounds Write

                                              • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                              • Package Manager: ubuntu:22.04 @@ -3298,7 +3299,7 @@

                                                Out-of-bounds Write

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and gnupg2/gpgv@2.2.27-3ubuntu2.1 + docker-image|quay.io/argoproj/argocd@v2.10.11 and gnupg2/gpgv@2.2.27-3ubuntu2.1
                                              @@ -3311,7 +3312,7 @@

                                              Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpgv@2.2.27-3ubuntu2.1 @@ -3320,7 +3321,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › apt@2.4.12 › @@ -3331,7 +3332,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3342,7 +3343,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/dirmngr@2.2.27-3ubuntu2.1 › @@ -3353,7 +3354,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -3364,7 +3365,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3377,7 +3378,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3390,7 +3391,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/dirmngr@2.2.27-3ubuntu2.1 @@ -3399,7 +3400,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3410,7 +3411,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3423,7 +3424,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg-l10n@2.2.27-3ubuntu2.1 @@ -3432,7 +3433,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3443,7 +3444,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg-utils@2.2.27-3ubuntu2.1 @@ -3452,7 +3453,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3463,7 +3464,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpg@2.2.27-3ubuntu2.1 @@ -3472,7 +3473,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3483,7 +3484,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3496,7 +3497,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3509,7 +3510,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpg-agent@2.2.27-3ubuntu2.1 @@ -3518,7 +3519,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3529,7 +3530,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3542,7 +3543,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3555,7 +3556,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpg-wks-client@2.2.27-3ubuntu2.1 @@ -3564,7 +3565,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3575,7 +3576,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpg-wks-server@2.2.27-3ubuntu2.1 @@ -3584,7 +3585,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3595,7 +3596,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gpgsm@2.2.27-3ubuntu2.1 @@ -3604,7 +3605,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3615,7 +3616,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gnupg2/gnupg@2.2.27-3ubuntu2.1 @@ -3664,7 +3665,7 @@

                                                Allocation of Resources Without Limits or Throttling

                                              • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                              • Package Manager: ubuntu:22.04 @@ -3677,7 +3678,7 @@

                                                Allocation of Resources Without Limits or Throttling

                                                Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and glibc/libc-bin@2.35-0ubuntu3.7 + docker-image|quay.io/argoproj/argocd@v2.10.11 and glibc/libc-bin@2.35-0ubuntu3.7
                                              @@ -3690,7 +3691,7 @@

                                              Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › glibc/libc-bin@2.35-0ubuntu3.7 @@ -3699,7 +3700,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › glibc/libc6@2.35-0ubuntu3.7 @@ -3745,7 +3746,7 @@

                                                Improper Input Validation

                                                • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                                • Package Manager: ubuntu:22.04 @@ -3759,7 +3760,7 @@

                                                  Improper Input Validation

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10, git@1:2.34.1-1ubuntu1.10 and others + docker-image|quay.io/argoproj/argocd@v2.10.11, git@1:2.34.1-1ubuntu1.10 and others
                                                @@ -3771,7 +3772,7 @@

                                                Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git@1:2.34.1-1ubuntu1.10 › @@ -3782,7 +3783,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git@1:2.34.1-1ubuntu1.10 @@ -3791,7 +3792,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › git-lfs@3.0.2-1ubuntu0.2 › @@ -3838,7 +3839,7 @@

                                                  Uncontrolled Recursion

                                                  • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                                  • Package Manager: ubuntu:22.04 @@ -3851,7 +3852,7 @@

                                                    Uncontrolled Recursion

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and gcc-12/libstdc++6@12.3.0-1ubuntu1~22.04 + docker-image|quay.io/argoproj/argocd@v2.10.11 and gcc-12/libstdc++6@12.3.0-1ubuntu1~22.04
                                                  @@ -3864,7 +3865,7 @@

                                                  Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gcc-12/libstdc++6@12.3.0-1ubuntu1~22.04 @@ -3873,7 +3874,7 @@

                                                    Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › apt@2.4.12 › @@ -3884,7 +3885,7 @@

                                                    Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › apt@2.4.12 › @@ -3897,7 +3898,7 @@

                                                    Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gcc-12/gcc-12-base@12.3.0-1ubuntu1~22.04 @@ -3906,7 +3907,7 @@

                                                    Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › gcc-12/libgcc-s1@12.3.0-1ubuntu1~22.04 @@ -3953,7 +3954,7 @@

                                                    Improper Input Validation

                                                    • - Manifest file: quay.io/argoproj/argocd:v2.10.10/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.10.11/argoproj/argocd › Dockerfile
                                                    • Package Manager: ubuntu:22.04 @@ -3966,7 +3967,7 @@

                                                      Improper Input Validation

                                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 and coreutils@8.32-4.1ubuntu1.2 + docker-image|quay.io/argoproj/argocd@v2.10.11 and coreutils@8.32-4.1ubuntu1.2
                                                    @@ -3979,7 +3980,7 @@

                                                    Detailed paths

                                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.10.10 + docker-image|quay.io/argoproj/argocd@v2.10.11 › coreutils@8.32-4.1ubuntu1.2 diff --git a/docs/snyk/v2.10.11/redis_7.0.15-alpine.html b/docs/snyk/v2.10.11/redis_7.0.15-alpine.html new file mode 100644 index 0000000000000..36a21565bec47 --- /dev/null +++ b/docs/snyk/v2.10.11/redis_7.0.15-alpine.html @@ -0,0 +1,484 @@ + + + + + + + + + Snyk test report + + + + + + + + + +
                                                      +
                                                      +
                                                      +
                                                      + + + Snyk - Open Source Security + + + + + + + +
                                                      +

                                                      Snyk test report

                                                      + +

                                                      May 26th 2024, 12:21:10 am (UTC+00:00)

                                                      +
                                                      +
                                                      + Scanned the following paths: +
                                                        +
                                                      • redis:7.0.15-alpine (apk)
                                                        • +
                                                      • redis:7.0.15-alpine/tianon/gosu//usr/local/bin/gosu (gomodules)
                                                        • +
                                                      +
                                                      + +
                                                      +
                                                      0 known vulnerabilities
                                                      +
                                                      0 vulnerable dependency paths
                                                      +
                                                      18 dependencies
                                                      +
                                                      +
                                                      +
                                                      +
                                                      + +
                                                      + No known vulnerabilities detected. +
                                                      +
                                                      + + + diff --git a/docs/snyk/v2.11.1/public.ecr.aws_docker_library_redis_7.0.14-alpine.html b/docs/snyk/v2.11.1/public.ecr.aws_docker_library_redis_7.0.14-alpine.html deleted file mode 100644 index 4d6f93607f673..0000000000000 --- a/docs/snyk/v2.11.1/public.ecr.aws_docker_library_redis_7.0.14-alpine.html +++ /dev/null @@ -1,1813 +0,0 @@ - - - - - - - - - Snyk test report - - - - - - - - - -
                                                      -
                                                      -
                                                      -
                                                      - - - Snyk - Open Source Security - - - - - - - -
                                                      -

                                                      Snyk test report

                                                      - -

                                                      May 22nd 2024, 5:04:13 pm (UTC+00:00)

                                                      -
                                                      -
                                                      - Scanned the following paths: -
                                                        -
                                                      • public.ecr.aws/docker/library/redis:7.0.14-alpine/docker/library/redis (apk)
                                                        • -
                                                      • public.ecr.aws/docker/library/redis:7.0.14-alpine/tianon/gosu//usr/local/bin/gosu (gomodules)
                                                        • -
                                                      -
                                                      - -
                                                      -
                                                      9 known vulnerabilities
                                                      -
                                                      65 vulnerable dependency paths
                                                      -
                                                      19 dependencies
                                                      -
                                                      -
                                                      -
                                                      -
                                                      - -
                                                      -
                                                      -
                                                      -

                                                      Out-of-bounds Write

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - openssl/libcrypto3 -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine and openssl/libcrypto3@3.1.4-r2 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libssl3@3.1.4-r2 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      Issue summary: The POLY1305 MAC (message authentication code) implementation - contains a bug that might corrupt the internal state of applications running - on PowerPC CPU based platforms if the CPU provides vector instructions.

                                                      -

                                                      Impact summary: If an attacker can influence whether the POLY1305 MAC - algorithm is used, the application state might be corrupted with various - application dependent consequences.

                                                      -

                                                      The POLY1305 MAC (message authentication code) implementation in OpenSSL for - PowerPC CPUs restores the contents of vector registers in a different order - than they are saved. Thus the contents of some of these vector registers - are corrupted when returning to the caller. The vulnerable code is used only - on newer PowerPC processors supporting the PowerISA 2.07 instructions.

                                                      -

                                                      The consequences of this kind of internal application state corruption can - be various - from no consequences, if the calling application does not - depend on the contents of non-volatile XMM registers at all, to the worst - consequences, where the attacker could get complete control of the application - process. However unless the compiler uses the vector registers for storing - pointers, the most likely consequence, if any, would be an incorrect result - of some application dependent calculations or a crash leading to a denial of - service.

                                                      -

                                                      The POLY1305 MAC algorithm is most frequently used as part of the - CHACHA20-POLY1305 AEAD (authenticated encryption with associated data) - algorithm. The most common usage of this AEAD cipher is with TLS protocol - versions 1.2 and 1.3. If this cipher is enabled on the server a malicious - client can influence whether this AEAD cipher is used. This implies that - TLS server applications using OpenSSL can be potentially impacted. However - we are currently not aware of any concrete application that would be affected - by this issue therefore we consider this a Low severity security issue.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 openssl to version 3.1.4-r3 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      CVE-2024-0727

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - openssl/libcrypto3 -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine and openssl/libcrypto3@3.1.4-r2 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libssl3@3.1.4-r2 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL - to crash leading to a potential Denial of Service attack

                                                      -

                                                      Impact summary: Applications loading files in the PKCS12 format from untrusted - sources might terminate abruptly.

                                                      -

                                                      A file in PKCS12 format can contain certificates and keys and may come from an - untrusted source. The PKCS12 specification allows certain fields to be NULL, but - OpenSSL does not correctly check for this case. This can lead to a NULL pointer - dereference that results in OpenSSL crashing. If an application processes PKCS12 - files from an untrusted source using the OpenSSL APIs then that application will - be vulnerable to this issue.

                                                      -

                                                      OpenSSL APIs that are vulnerable to this are: PKCS12_parse(), - PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes() - and PKCS12_newpass().

                                                      -

                                                      We have also fixed a similar issue in SMIME_write_PKCS7(). However since this - function is related to writing data we do not consider it security significant.

                                                      -

                                                      The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 openssl to version 3.1.4-r5 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      Out-of-bounds Write

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r16 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      Use After Free

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      Use After Free

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      Use After Free

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      CVE-2023-6237

                                                      -
                                                      - -
                                                      - low severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - openssl/libcrypto3 -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine and openssl/libcrypto3@3.1.4-r2 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libssl3@3.1.4-r2 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      Issue summary: Checking excessively long invalid RSA public keys may take - a long time.

                                                      -

                                                      Impact summary: Applications that use the function EVP_PKEY_public_check() - to check RSA public keys may experience long delays. Where the key that - is being checked has been obtained from an untrusted source this may lead - to a Denial of Service.

                                                      -

                                                      When function EVP_PKEY_public_check() is called on RSA public keys, - a computation is done to confirm that the RSA modulus, n, is composite. - For valid RSA keys, n is a product of two or more large primes and this - computation completes quickly. However, if n is an overly large prime, - then this computation would take a long time.

                                                      -

                                                      An application that calls EVP_PKEY_public_check() and supplies an RSA key - obtained from an untrusted source could be vulnerable to a Denial of Service - attack.

                                                      -

                                                      The function EVP_PKEY_public_check() is not called from other OpenSSL - functions however it is called from the OpenSSL pkey command line - application. For that reason that application is also vulnerable if used - with the '-pubin' and '-check' options on untrusted data.

                                                      -

                                                      The OpenSSL SSL/TLS implementation is not affected by this issue.

                                                      -

                                                      The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 openssl to version 3.1.4-r4 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      CVE-2024-2511

                                                      -
                                                      - -
                                                      - low severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - openssl/libcrypto3 -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine and openssl/libcrypto3@3.1.4-r2 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libssl3@3.1.4-r2 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      Issue summary: Some non-default TLS server configurations can cause unbounded - memory growth when processing TLSv1.3 sessions

                                                      -

                                                      Impact summary: An attacker may exploit certain server configurations to trigger - unbounded memory growth that would lead to a Denial of Service

                                                      -

                                                      This problem can occur in TLSv1.3 if the non-default SSL_OP_NO_TICKET option is - being used (but not if early_data support is also configured and the default - anti-replay protection is in use). In this case, under certain conditions, the - session cache can get into an incorrect state and it will fail to flush properly - as it fills. The session cache will continue to grow in an unbounded manner. A - malicious client could deliberately create the scenario for this failure to - force a Denial of Service. It may also happen by accident in normal operation.

                                                      -

                                                      This issue only affects TLS servers supporting TLSv1.3. It does not affect TLS - clients.

                                                      -

                                                      The FIPS modules in 3.2, 3.1 and 3.0 are not affected by this issue. OpenSSL - 1.0.2 is also not affected by this issue.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 openssl to version 3.1.4-r6 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      CVE-2024-4603

                                                      -
                                                      - -
                                                      - low severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - openssl/libcrypto3 -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine and openssl/libcrypto3@3.1.4-r2 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libssl3@3.1.4-r2 - › - openssl/libcrypto3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - .redis-rundeps@20231208.201137 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.14-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r2 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      Issue summary: Checking excessively long DSA keys or parameters may be very - slow.

                                                      -

                                                      Impact summary: Applications that use the functions EVP_PKEY_param_check() - or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may - experience long delays. Where the key or parameters that are being checked - have been obtained from an untrusted source this may lead to a Denial of - Service.

                                                      -

                                                      The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform - various checks on DSA parameters. Some of those computations take a long time - if the modulus (p parameter) is too large.

                                                      -

                                                      Trying to use a very large modulus is slow and OpenSSL will not allow using - public keys with a modulus which is over 10,000 bits in length for signature - verification. However the key and parameter check functions do not limit - the modulus size when performing the checks.

                                                      -

                                                      An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check() - and supplies a key or parameters obtained from an untrusted source could be - vulnerable to a Denial of Service attack.

                                                      -

                                                      These functions are not called by OpenSSL itself on untrusted DSA keys so - only applications that directly call these functions may be vulnerable.

                                                      -

                                                      Also vulnerable are the OpenSSL pkey and pkeyparam command line applications - when using the -check option.

                                                      -

                                                      The OpenSSL SSL/TLS implementation is not affected by this issue.

                                                      -

                                                      The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 openssl to version 3.1.5-r0 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -
                                                      -
                                                      - - - diff --git a/docs/snyk/v2.11.1/argocd-iac-install.html b/docs/snyk/v2.11.2/argocd-iac-install.html similarity index 99% rename from docs/snyk/v2.11.1/argocd-iac-install.html rename to docs/snyk/v2.11.2/argocd-iac-install.html index 43e1bb6da2011..e9aa73593e7d4 100644 --- a/docs/snyk/v2.11.1/argocd-iac-install.html +++ b/docs/snyk/v2.11.2/argocd-iac-install.html @@ -456,7 +456,7 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:06:03 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:20:14 am (UTC+00:00)

                                                      Scanned the following path: diff --git a/docs/snyk/v2.11.1/argocd-iac-namespace-install.html b/docs/snyk/v2.11.2/argocd-iac-namespace-install.html similarity index 99% rename from docs/snyk/v2.11.1/argocd-iac-namespace-install.html rename to docs/snyk/v2.11.2/argocd-iac-namespace-install.html index df45b709a2003..7c7bc8e617fe1 100644 --- a/docs/snyk/v2.11.1/argocd-iac-namespace-install.html +++ b/docs/snyk/v2.11.2/argocd-iac-namespace-install.html @@ -456,7 +456,7 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:06:13 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:20:24 am (UTC+00:00)

                                                      Scanned the following path: diff --git a/docs/snyk/v2.11.1/argocd-test.html b/docs/snyk/v2.11.2/argocd-test.html similarity index 99% rename from docs/snyk/v2.11.1/argocd-test.html rename to docs/snyk/v2.11.2/argocd-test.html index 29b797e4401b5..db586c815ba6f 100644 --- a/docs/snyk/v2.11.1/argocd-test.html +++ b/docs/snyk/v2.11.2/argocd-test.html @@ -456,7 +456,7 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:03:55 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:18:19 am (UTC+00:00)

                                                      Scanned the following paths: @@ -850,7 +850,7 @@

                                                      Detailed paths

                                                      Introduced through: github.com/argoproj/argo-cd/v2@0.0.0 › - go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@0.42.0 + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@0.46.1 › google.golang.org/grpc@1.59.0 › diff --git a/docs/snyk/v2.11.1/ghcr.io_dexidp_dex_v2.38.0.html b/docs/snyk/v2.11.2/ghcr.io_dexidp_dex_v2.38.0.html similarity index 99% rename from docs/snyk/v2.11.1/ghcr.io_dexidp_dex_v2.38.0.html rename to docs/snyk/v2.11.2/ghcr.io_dexidp_dex_v2.38.0.html index 48ac534757e8f..16ae63ba60417 100644 --- a/docs/snyk/v2.11.1/ghcr.io_dexidp_dex_v2.38.0.html +++ b/docs/snyk/v2.11.2/ghcr.io_dexidp_dex_v2.38.0.html @@ -456,7 +456,7 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:04:02 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:18:25 am (UTC+00:00)

                                                      Scanned the following paths: diff --git a/docs/snyk/v2.10.10/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html b/docs/snyk/v2.11.2/haproxy_2.6.14-alpine.html similarity index 91% rename from docs/snyk/v2.10.10/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html rename to docs/snyk/v2.11.2/haproxy_2.6.14-alpine.html index 5cb279b8e6bc2..c8004911a599e 100644 --- a/docs/snyk/v2.10.10/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html +++ b/docs/snyk/v2.11.2/haproxy_2.6.14-alpine.html @@ -456,12 +456,12 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:06:36 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:18:30 am (UTC+00:00)

                                                      Scanned the following path:
                                                        -
                                                      • public.ecr.aws/docker/library/haproxy:2.6.14-alpine/docker/library/haproxy (apk)
                                                        • +
                                                      • haproxy:2.6.14-alpine (apk)
                                                      @@ -476,8 +476,8 @@

                                                      Snyk test report

    Project docker-image|public.ecr.aws/docker/library/haproxy
    Path public.ecr.aws/docker/library/haproxy:2.6.14-alpine/docker/library/haproxy
    Project docker-image|haproxy
    Path haproxy:2.6.14-alpine
    Package Manager apk
    - - + + @@ -507,7 +507,7 @@

    CVE-2023-5363

  • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    • @@ -520,7 +520,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -529,7 +529,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -540,7 +540,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -551,7 +551,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -562,7 +562,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -575,7 +575,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -584,7 +584,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -595,7 +595,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -606,7 +606,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -699,7 +699,7 @@

      Improper Check for Unusual or Exceptional Conditions

      Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -712,7 +712,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -721,7 +721,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -732,7 +732,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -743,7 +743,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -754,7 +754,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -767,7 +767,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -776,7 +776,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -787,7 +787,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -798,7 +798,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -883,7 +883,7 @@

      Out-of-bounds Write

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -896,7 +896,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -905,7 +905,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -916,7 +916,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -927,7 +927,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -938,7 +938,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -951,7 +951,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -960,7 +960,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -971,7 +971,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -982,7 +982,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1072,7 +1072,7 @@

      CVE-2024-0727

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1085,7 +1085,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1094,7 +1094,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1105,7 +1105,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1116,7 +1116,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1127,7 +1127,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1140,7 +1140,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1149,7 +1149,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1160,7 +1160,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1171,7 +1171,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1248,7 +1248,7 @@

      Out-of-bounds Write

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and busybox/busybox@1.36.1-r2 + docker-image|haproxy@2.6.14-alpine and busybox/busybox@1.36.1-r2
    @@ -1261,7 +1261,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/busybox@1.36.1-r2 @@ -1270,7 +1270,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › alpine-baselayout/alpine-baselayout@3.4.3-r1 › @@ -1283,7 +1283,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/busybox-binsh@1.36.1-r2 @@ -1292,7 +1292,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › alpine-baselayout/alpine-baselayout@3.4.3-r1 › @@ -1303,7 +1303,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 @@ -1356,7 +1356,7 @@

      CVE-2023-6237

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1369,7 +1369,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1378,7 +1378,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1389,7 +1389,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1400,7 +1400,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1411,7 +1411,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1424,7 +1424,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1433,7 +1433,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1444,7 +1444,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1455,7 +1455,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1533,7 +1533,7 @@

      CVE-2024-2511

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1546,7 +1546,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1555,7 +1555,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1566,7 +1566,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1577,7 +1577,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1588,7 +1588,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1601,7 +1601,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1610,7 +1610,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1621,7 +1621,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1632,7 +1632,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1707,7 +1707,7 @@

      CVE-2024-4603

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1720,7 +1720,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1729,7 +1729,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1740,7 +1740,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1751,7 +1751,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1762,7 +1762,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1775,7 +1775,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1784,7 +1784,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1795,7 +1795,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1806,7 +1806,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › diff --git a/docs/snyk/v2.11.1/quay.io_argoproj_argocd_v2.11.1.html b/docs/snyk/v2.11.2/quay.io_argoproj_argocd_v2.11.2.html similarity index 97% rename from docs/snyk/v2.11.1/quay.io_argoproj_argocd_v2.11.1.html rename to docs/snyk/v2.11.2/quay.io_argoproj_argocd_v2.11.2.html index 0089daab5c89e..35a6842410700 100644 --- a/docs/snyk/v2.11.1/quay.io_argoproj_argocd_v2.11.1.html +++ b/docs/snyk/v2.11.2/quay.io_argoproj_argocd_v2.11.2.html @@ -456,16 +456,16 @@

      Snyk test report

      -

      May 22nd 2024, 5:04:33 pm (UTC+00:00)

      +

      May 26th 2024, 12:18:49 am (UTC+00:00)

      Scanned the following paths:
        -
      • quay.io/argoproj/argocd:v2.11.1/argoproj/argocd/Dockerfile (deb)
        • -
      • quay.io/argoproj/argocd:v2.11.1/argoproj/argo-cd/v2//usr/local/bin/argocd (gomodules)
        • -
      • quay.io/argoproj/argocd:v2.11.1//usr/local/bin/kustomize (gomodules)
        • -
      • quay.io/argoproj/argocd:v2.11.1/helm/v3//usr/local/bin/helm (gomodules)
        • -
      • quay.io/argoproj/argocd:v2.11.1/git-lfs/git-lfs//usr/bin/git-lfs (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.11.2/argoproj/argocd/Dockerfile (deb)
        • +
      • quay.io/argoproj/argocd:v2.11.2/argoproj/argo-cd/v2//usr/local/bin/argocd (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.11.2//usr/local/bin/kustomize (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.11.2/helm/v3//usr/local/bin/helm (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.11.2/git-lfs/git-lfs//usr/bin/git-lfs (gomodules)
      @@ -492,7 +492,7 @@

      Allocation of Resources Without Limits or Throttling

    • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argo-cd/v2 › /usr/local/bin/argocd
    • Package Manager: golang @@ -572,7 +572,7 @@

      CVE-2020-22916

      • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
      • Package Manager: ubuntu:22.04 @@ -585,7 +585,7 @@

        CVE-2020-22916

      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and xz-utils/liblzma5@5.2.5-2ubuntu1 + docker-image|quay.io/argoproj/argocd@v2.11.2 and xz-utils/liblzma5@5.2.5-2ubuntu1
      @@ -598,7 +598,7 @@

      Detailed paths

      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › xz-utils/liblzma5@5.2.5-2ubuntu1 @@ -648,7 +648,7 @@

        Information Exposure

        • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
        • Package Manager: ubuntu:22.04 @@ -661,7 +661,7 @@

          Information Exposure

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and libgcrypt20@1.9.4-3ubuntu3 + docker-image|quay.io/argoproj/argocd@v2.11.2 and libgcrypt20@1.9.4-3ubuntu3
        @@ -674,7 +674,7 @@

        Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › libgcrypt20@1.9.4-3ubuntu3 @@ -683,7 +683,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/dirmngr@2.2.27-3ubuntu2.1 › @@ -694,7 +694,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -705,7 +705,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › apt@2.4.12 › @@ -718,7 +718,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › apt@2.4.12 › @@ -731,7 +731,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -744,7 +744,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -757,7 +757,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -770,7 +770,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -783,7 +783,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -796,7 +796,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -809,7 +809,7 @@

          Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › apt@2.4.12 › @@ -861,7 +861,7 @@

          CVE-2024-26462

          • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
          • Package Manager: ubuntu:22.04 @@ -874,7 +874,7 @@

            CVE-2024-26462

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.11.2 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
          @@ -887,7 +887,7 @@

          Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -896,7 +896,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -917,7 +917,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -940,7 +940,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -949,7 +949,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -970,7 +970,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -979,7 +979,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -990,7 +990,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git@1:2.34.1-1ubuntu1.10 › @@ -1003,7 +1003,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git@1:2.34.1-1ubuntu1.10 › @@ -1018,7 +1018,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -1037,7 +1037,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -1082,7 +1082,7 @@

            LGPL-3.0 license

            • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argo-cd/v2 › /usr/local/bin/argocd
            • Package Manager: golang @@ -1142,7 +1142,7 @@

              MPL-2.0 license

              • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argo-cd/v2 › /usr/local/bin/argocd
              • Package Manager: golang @@ -1202,7 +1202,7 @@

                MPL-2.0 license

                • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                • Package Manager: golang @@ -1262,7 +1262,7 @@

                  MPL-2.0 license

                  • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                  • Package Manager: golang @@ -1322,7 +1322,7 @@

                    MPL-2.0 license

                    • - Manifest file: quay.io/argoproj/argocd:v2.11.1/helm/v3 › /usr/local/bin/helm + Manifest file: quay.io/argoproj/argocd:v2.11.2/helm/v3 › /usr/local/bin/helm
                    • Package Manager: golang @@ -1382,7 +1382,7 @@

                      MPL-2.0 license

                      • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                      • Package Manager: golang @@ -1442,7 +1442,7 @@

                        MPL-2.0 license

                        • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                        • Package Manager: golang @@ -1502,7 +1502,7 @@

                          CVE-2023-7008

                          • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                          • Package Manager: ubuntu:22.04 @@ -1515,7 +1515,7 @@

                            CVE-2023-7008

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and systemd/libsystemd0@249.11-0ubuntu3.12 + docker-image|quay.io/argoproj/argocd@v2.11.2 and systemd/libsystemd0@249.11-0ubuntu3.12
                          @@ -1528,7 +1528,7 @@

                          Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › systemd/libsystemd0@249.11-0ubuntu3.12 @@ -1537,7 +1537,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › apt@2.4.12 › @@ -1548,7 +1548,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › procps/libprocps8@2:3.3.17-6ubuntu2.1 › @@ -1559,7 +1559,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › util-linux@2.37.2-4ubuntu3.4 › @@ -1570,7 +1570,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › util-linux/bsdutils@1:2.37.2-4ubuntu3.4 › @@ -1581,7 +1581,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › apt@2.4.12 › @@ -1594,7 +1594,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › systemd/libudev1@249.11-0ubuntu3.12 @@ -1603,7 +1603,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › libfido2/libfido2-1@1.10.0-1 › @@ -1614,7 +1614,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › util-linux@2.37.2-4ubuntu3.4 › @@ -1625,7 +1625,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › apt@2.4.12 › @@ -1658,6 +1658,7 @@

                            References

                          • https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/
                          • https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/
                          • https://access.redhat.com/errata/RHSA-2024:2463
                            • +
                          • https://access.redhat.com/errata/RHSA-2024:3203
                          @@ -1679,7 +1680,7 @@

                          Arbitrary Code Injection

                          • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                          • Package Manager: ubuntu:22.04 @@ -1692,7 +1693,7 @@

                            Arbitrary Code Injection

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and shadow/passwd@1:4.8.1-2ubuntu2.2 + docker-image|quay.io/argoproj/argocd@v2.11.2 and shadow/passwd@1:4.8.1-2ubuntu2.2
                          @@ -1705,7 +1706,7 @@

                          Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › shadow/passwd@1:4.8.1-2ubuntu2.2 @@ -1714,7 +1715,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -1725,7 +1726,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -1736,7 +1737,7 @@

                            Detailed paths

                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › shadow/login@1:4.8.1-2ubuntu2.2 @@ -1783,7 +1784,7 @@

                            Uncontrolled Recursion

                            • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                            • Package Manager: ubuntu:22.04 @@ -1796,7 +1797,7 @@

                              Uncontrolled Recursion

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and pcre3/libpcre3@2:8.39-13ubuntu0.22.04.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 and pcre3/libpcre3@2:8.39-13ubuntu0.22.04.1
                            @@ -1809,7 +1810,7 @@

                            Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › pcre3/libpcre3@2:8.39-13ubuntu0.22.04.1 @@ -1818,7 +1819,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › grep@3.7-1build1 › @@ -1871,7 +1872,7 @@

                              Release of Invalid Pointer or Reference

                              • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                              • Package Manager: ubuntu:22.04 @@ -1884,7 +1885,7 @@

                                Release of Invalid Pointer or Reference

                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and patch@2.7.6-7build2 + docker-image|quay.io/argoproj/argocd@v2.11.2 and patch@2.7.6-7build2
                              @@ -1897,7 +1898,7 @@

                              Detailed paths

                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › patch@2.7.6-7build2 @@ -1941,7 +1942,7 @@

                                Double Free

                                • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                • Package Manager: ubuntu:22.04 @@ -1954,7 +1955,7 @@

                                  Double Free

                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and patch@2.7.6-7build2 + docker-image|quay.io/argoproj/argocd@v2.11.2 and patch@2.7.6-7build2
                                @@ -1967,7 +1968,7 @@

                                Detailed paths

                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › patch@2.7.6-7build2 @@ -2016,7 +2017,7 @@

                                  CVE-2023-50495

                                  • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                  • Package Manager: ubuntu:22.04 @@ -2029,7 +2030,7 @@

                                    CVE-2023-50495

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and ncurses/libtinfo6@6.3-2ubuntu0.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 and ncurses/libtinfo6@6.3-2ubuntu0.1
                                  @@ -2042,7 +2043,7 @@

                                  Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/libtinfo6@6.3-2ubuntu0.1 @@ -2051,7 +2052,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › bash@5.1-6ubuntu1.1 › @@ -2062,7 +2063,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/libncursesw6@6.3-2ubuntu0.1 › @@ -2073,7 +2074,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › less@590-1ubuntu0.22.04.3 › @@ -2084,7 +2085,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › libedit/libedit2@3.1-20210910-1build1 › @@ -2095,7 +2096,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/libncurses6@6.3-2ubuntu0.1 › @@ -2106,7 +2107,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/ncurses-bin@6.3-2ubuntu0.1 › @@ -2117,7 +2118,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › procps@2:3.3.17-6ubuntu2.1 › @@ -2128,7 +2129,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › util-linux@2.37.2-4ubuntu3.4 › @@ -2139,7 +2140,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -2154,7 +2155,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2169,7 +2170,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/libncursesw6@6.3-2ubuntu0.1 @@ -2178,7 +2179,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › procps@2:3.3.17-6ubuntu2.1 › @@ -2189,7 +2190,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2204,7 +2205,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/libncurses6@6.3-2ubuntu0.1 @@ -2213,7 +2214,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › procps@2:3.3.17-6ubuntu2.1 › @@ -2224,7 +2225,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/ncurses-base@6.3-2ubuntu0.1 @@ -2233,7 +2234,7 @@

                                    Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/ncurses-bin@6.3-2ubuntu0.1 @@ -2280,7 +2281,7 @@

                                    CVE-2023-45918

                                    • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                    • Package Manager: ubuntu:22.04 @@ -2293,7 +2294,7 @@

                                      CVE-2023-45918

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and ncurses/libtinfo6@6.3-2ubuntu0.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 and ncurses/libtinfo6@6.3-2ubuntu0.1
                                    @@ -2306,7 +2307,7 @@

                                    Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/libtinfo6@6.3-2ubuntu0.1 @@ -2315,7 +2316,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › bash@5.1-6ubuntu1.1 › @@ -2326,7 +2327,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/libncursesw6@6.3-2ubuntu0.1 › @@ -2337,7 +2338,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › less@590-1ubuntu0.22.04.3 › @@ -2348,7 +2349,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › libedit/libedit2@3.1-20210910-1build1 › @@ -2359,7 +2360,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/libncurses6@6.3-2ubuntu0.1 › @@ -2370,7 +2371,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/ncurses-bin@6.3-2ubuntu0.1 › @@ -2381,7 +2382,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › procps@2:3.3.17-6ubuntu2.1 › @@ -2392,7 +2393,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › util-linux@2.37.2-4ubuntu3.4 › @@ -2403,7 +2404,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -2418,7 +2419,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2433,7 +2434,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/libncursesw6@6.3-2ubuntu0.1 @@ -2442,7 +2443,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › procps@2:3.3.17-6ubuntu2.1 › @@ -2453,7 +2454,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2468,7 +2469,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/libncurses6@6.3-2ubuntu0.1 @@ -2477,7 +2478,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › procps@2:3.3.17-6ubuntu2.1 › @@ -2488,7 +2489,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/ncurses-base@6.3-2ubuntu0.1 @@ -2497,7 +2498,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › ncurses/ncurses-bin@6.3-2ubuntu0.1 @@ -2542,7 +2543,7 @@

                                      Resource Exhaustion

                                      • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                      • Package Manager: ubuntu:22.04 @@ -2555,7 +2556,7 @@

                                        Resource Exhaustion

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and libzstd/libzstd1@1.4.8+dfsg-3build1 + docker-image|quay.io/argoproj/argocd@v2.11.2 and libzstd/libzstd1@1.4.8+dfsg-3build1
                                      @@ -2568,7 +2569,7 @@

                                      Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › libzstd/libzstd1@1.4.8+dfsg-3build1 @@ -2619,7 +2620,7 @@

                                        Integer Overflow or Wraparound

                                        • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                        • Package Manager: ubuntu:22.04 @@ -2632,7 +2633,7 @@

                                          Integer Overflow or Wraparound

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.11.2 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
                                        @@ -2645,7 +2646,7 @@

                                        Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -2654,7 +2655,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -2675,7 +2676,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -2698,7 +2699,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -2707,7 +2708,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -2728,7 +2729,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -2737,7 +2738,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -2748,7 +2749,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git@1:2.34.1-1ubuntu1.10 › @@ -2761,7 +2762,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git@1:2.34.1-1ubuntu1.10 › @@ -2776,7 +2777,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -2795,7 +2796,7 @@

                                          Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -2843,7 +2844,7 @@

                                          CVE-2024-26461

                                          • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                          • Package Manager: ubuntu:22.04 @@ -2856,7 +2857,7 @@

                                            CVE-2024-26461

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.11.2 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
                                          @@ -2869,7 +2870,7 @@

                                          Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -2878,7 +2879,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -2899,7 +2900,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -2922,7 +2923,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -2931,7 +2932,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -2952,7 +2953,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -2961,7 +2962,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -2972,7 +2973,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git@1:2.34.1-1ubuntu1.10 › @@ -2985,7 +2986,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git@1:2.34.1-1ubuntu1.10 › @@ -3000,7 +3001,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -3019,7 +3020,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -3064,7 +3065,7 @@

                                            CVE-2024-26458

                                            • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                            • Package Manager: ubuntu:22.04 @@ -3077,7 +3078,7 @@

                                              CVE-2024-26458

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.11.2 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
                                            @@ -3090,7 +3091,7 @@

                                            Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -3099,7 +3100,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -3120,7 +3121,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -3143,7 +3144,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -3152,7 +3153,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -3173,7 +3174,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -3182,7 +3183,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -3193,7 +3194,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git@1:2.34.1-1ubuntu1.10 › @@ -3206,7 +3207,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git@1:2.34.1-1ubuntu1.10 › @@ -3221,7 +3222,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › adduser@3.118ubuntu5 › @@ -3240,7 +3241,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -3285,7 +3286,7 @@

                                              Out-of-bounds Write

                                              • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                              • Package Manager: ubuntu:22.04 @@ -3298,7 +3299,7 @@

                                                Out-of-bounds Write

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and gnupg2/gpgv@2.2.27-3ubuntu2.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 and gnupg2/gpgv@2.2.27-3ubuntu2.1
                                              @@ -3311,7 +3312,7 @@

                                              Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpgv@2.2.27-3ubuntu2.1 @@ -3320,7 +3321,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › apt@2.4.12 › @@ -3331,7 +3332,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3342,7 +3343,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/dirmngr@2.2.27-3ubuntu2.1 › @@ -3353,7 +3354,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -3364,7 +3365,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3377,7 +3378,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3390,7 +3391,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/dirmngr@2.2.27-3ubuntu2.1 @@ -3399,7 +3400,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3410,7 +3411,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3423,7 +3424,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg-l10n@2.2.27-3ubuntu2.1 @@ -3432,7 +3433,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3443,7 +3444,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg-utils@2.2.27-3ubuntu2.1 @@ -3452,7 +3453,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3463,7 +3464,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpg@2.2.27-3ubuntu2.1 @@ -3472,7 +3473,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3483,7 +3484,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3496,7 +3497,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3509,7 +3510,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpg-agent@2.2.27-3ubuntu2.1 @@ -3518,7 +3519,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3529,7 +3530,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3542,7 +3543,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3555,7 +3556,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpg-wks-client@2.2.27-3ubuntu2.1 @@ -3564,7 +3565,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3575,7 +3576,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpg-wks-server@2.2.27-3ubuntu2.1 @@ -3584,7 +3585,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3595,7 +3596,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gpgsm@2.2.27-3ubuntu2.1 @@ -3604,7 +3605,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3615,7 +3616,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gnupg2/gnupg@2.2.27-3ubuntu2.1 @@ -3664,7 +3665,7 @@

                                                Allocation of Resources Without Limits or Throttling

                                              • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                              • Package Manager: ubuntu:22.04 @@ -3677,7 +3678,7 @@

                                                Allocation of Resources Without Limits or Throttling

                                                Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and glibc/libc-bin@2.35-0ubuntu3.7 + docker-image|quay.io/argoproj/argocd@v2.11.2 and glibc/libc-bin@2.35-0ubuntu3.7
                                              @@ -3690,7 +3691,7 @@

                                              Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › glibc/libc-bin@2.35-0ubuntu3.7 @@ -3699,7 +3700,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › glibc/libc6@2.35-0ubuntu3.7 @@ -3745,7 +3746,7 @@

                                                Improper Input Validation

                                                • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                                • Package Manager: ubuntu:22.04 @@ -3759,7 +3760,7 @@

                                                  Improper Input Validation

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1, git@1:2.34.1-1ubuntu1.10 and others + docker-image|quay.io/argoproj/argocd@v2.11.2, git@1:2.34.1-1ubuntu1.10 and others
                                                @@ -3771,7 +3772,7 @@

                                                Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git@1:2.34.1-1ubuntu1.10 › @@ -3782,7 +3783,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git@1:2.34.1-1ubuntu1.10 @@ -3791,7 +3792,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › git-lfs@3.0.2-1ubuntu0.2 › @@ -3838,7 +3839,7 @@

                                                  Uncontrolled Recursion

                                                  • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                                  • Package Manager: ubuntu:22.04 @@ -3851,7 +3852,7 @@

                                                    Uncontrolled Recursion

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and gcc-12/libstdc++6@12.3.0-1ubuntu1~22.04 + docker-image|quay.io/argoproj/argocd@v2.11.2 and gcc-12/libstdc++6@12.3.0-1ubuntu1~22.04
                                                  @@ -3864,7 +3865,7 @@

                                                  Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gcc-12/libstdc++6@12.3.0-1ubuntu1~22.04 @@ -3873,7 +3874,7 @@

                                                    Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › apt@2.4.12 › @@ -3884,7 +3885,7 @@

                                                    Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › apt@2.4.12 › @@ -3897,7 +3898,7 @@

                                                    Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gcc-12/gcc-12-base@12.3.0-1ubuntu1~22.04 @@ -3906,7 +3907,7 @@

                                                    Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › gcc-12/libgcc-s1@12.3.0-1ubuntu1~22.04 @@ -3953,7 +3954,7 @@

                                                    Improper Input Validation

                                                    • - Manifest file: quay.io/argoproj/argocd:v2.11.1/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.11.2/argoproj/argocd › Dockerfile
                                                    • Package Manager: ubuntu:22.04 @@ -3966,7 +3967,7 @@

                                                      Improper Input Validation

                                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 and coreutils@8.32-4.1ubuntu1.2 + docker-image|quay.io/argoproj/argocd@v2.11.2 and coreutils@8.32-4.1ubuntu1.2
                                                    @@ -3979,7 +3980,7 @@

                                                    Detailed paths

                                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.11.1 + docker-image|quay.io/argoproj/argocd@v2.11.2 › coreutils@8.32-4.1ubuntu1.2 diff --git a/docs/snyk/v2.11.1/redis_7.0.14-alpine.html b/docs/snyk/v2.11.2/redis_7.0.14-alpine.html similarity index 99% rename from docs/snyk/v2.11.1/redis_7.0.14-alpine.html rename to docs/snyk/v2.11.2/redis_7.0.14-alpine.html index e9aa587faee1d..3a21ad48629a4 100644 --- a/docs/snyk/v2.11.1/redis_7.0.14-alpine.html +++ b/docs/snyk/v2.11.2/redis_7.0.14-alpine.html @@ -456,7 +456,7 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:04:41 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:18:55 am (UTC+00:00)

                                                      Scanned the following paths: diff --git a/docs/snyk/v2.9.15/public.ecr.aws_docker_library_redis_7.0.15-alpine.html b/docs/snyk/v2.9.15/public.ecr.aws_docker_library_redis_7.0.15-alpine.html deleted file mode 100644 index 7299d28a94ccf..0000000000000 --- a/docs/snyk/v2.9.15/public.ecr.aws_docker_library_redis_7.0.15-alpine.html +++ /dev/null @@ -1,1097 +0,0 @@ - - - - - - - - - Snyk test report - - - - - - - - - -
                                                      -
                                                      -
                                                      -
                                                      - - - Snyk - Open Source Security - - - - - - - -
                                                      -

                                                      Snyk test report

                                                      - -

                                                      May 22nd 2024, 5:09:14 pm (UTC+00:00)

                                                      -
                                                      -
                                                      - Scanned the following paths: -
                                                        -
                                                      • public.ecr.aws/docker/library/redis:7.0.15-alpine/docker/library/redis (apk)
                                                        • -
                                                      • public.ecr.aws/docker/library/redis:7.0.15-alpine/tianon/gosu//usr/local/bin/gosu (gomodules)
                                                        • -
                                                      -
                                                      - -
                                                      -
                                                      5 known vulnerabilities
                                                      -
                                                      29 vulnerable dependency paths
                                                      -
                                                      19 dependencies
                                                      -
                                                      -
                                                      -
                                                      -
                                                      - -
                                                      -
                                                      -
                                                      -

                                                      Out-of-bounds Write

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r16 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      Use After Free

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      Use After Free

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      Use After Free

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      CVE-2024-4603

                                                      -
                                                      - -
                                                      - low severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - openssl/libcrypto3 -
                                                        • - -
                                                      • Introduced through: - - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine and openssl/libcrypto3@3.1.4-r6 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - openssl/libcrypto3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libcrypto3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - › - openssl/libcrypto3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - openssl/libssl3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|public.ecr.aws/docker/library/redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r6 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      Issue summary: Checking excessively long DSA keys or parameters may be very - slow.

                                                      -

                                                      Impact summary: Applications that use the functions EVP_PKEY_param_check() - or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may - experience long delays. Where the key or parameters that are being checked - have been obtained from an untrusted source this may lead to a Denial of - Service.

                                                      -

                                                      The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform - various checks on DSA parameters. Some of those computations take a long time - if the modulus (p parameter) is too large.

                                                      -

                                                      Trying to use a very large modulus is slow and OpenSSL will not allow using - public keys with a modulus which is over 10,000 bits in length for signature - verification. However the key and parameter check functions do not limit - the modulus size when performing the checks.

                                                      -

                                                      An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check() - and supplies a key or parameters obtained from an untrusted source could be - vulnerable to a Denial of Service attack.

                                                      -

                                                      These functions are not called by OpenSSL itself on untrusted DSA keys so - only applications that directly call these functions may be vulnerable.

                                                      -

                                                      Also vulnerable are the OpenSSL pkey and pkeyparam command line applications - when using the -check option.

                                                      -

                                                      The OpenSSL SSL/TLS implementation is not affected by this issue.

                                                      -

                                                      The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 openssl to version 3.1.5-r0 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -
                                                      -
                                                      - - - diff --git a/docs/snyk/v2.9.15/redis_7.0.15-alpine.html b/docs/snyk/v2.9.15/redis_7.0.15-alpine.html deleted file mode 100644 index 1272257dd9a37..0000000000000 --- a/docs/snyk/v2.9.15/redis_7.0.15-alpine.html +++ /dev/null @@ -1,1097 +0,0 @@ - - - - - - - - - Snyk test report - - - - - - - - - -
                                                      -
                                                      -
                                                      -
                                                      - - - Snyk - Open Source Security - - - - - - - -
                                                      -

                                                      Snyk test report

                                                      - -

                                                      May 22nd 2024, 5:09:37 pm (UTC+00:00)

                                                      -
                                                      -
                                                      - Scanned the following paths: -
                                                        -
                                                      • redis:7.0.15-alpine (apk)
                                                        • -
                                                      • redis:7.0.15-alpine/tianon/gosu//usr/local/bin/gosu (gomodules)
                                                        • -
                                                      -
                                                      - -
                                                      -
                                                      5 known vulnerabilities
                                                      -
                                                      29 vulnerable dependency paths
                                                      -
                                                      19 dependencies
                                                      -
                                                      -
                                                      -
                                                      -
                                                      - -
                                                      -
                                                      -
                                                      -

                                                      Out-of-bounds Write

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r16 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      Use After Free

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      Use After Free

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      Use After Free

                                                      -
                                                      - -
                                                      - medium severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - busybox/busybox -
                                                        • - -
                                                      • Introduced through: - - docker-image|redis@7.0.15-alpine and busybox/busybox@1.36.1-r15 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - › - busybox/busybox@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - alpine-baselayout/alpine-baselayout@3.4.3-r2 - › - busybox/busybox-binsh@1.36.1-r15 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 busybox to version 1.36.1-r17 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -

                                                      CVE-2024-4603

                                                      -
                                                      - -
                                                      - low severity -
                                                      - -
                                                      - -
                                                        -
                                                      • - Package Manager: alpine:3.19 -
                                                        • -
                                                      • - Vulnerable module: - - openssl/libcrypto3 -
                                                        • - -
                                                      • Introduced through: - - docker-image|redis@7.0.15-alpine and openssl/libcrypto3@3.1.4-r6 - -
                                                        • -
                                                      - -
                                                      - - -

                                                      Detailed paths

                                                      - -
                                                        -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - openssl/libcrypto3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libcrypto3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libcrypto3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libcrypto3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - › - openssl/libcrypto3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - openssl/libssl3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - .redis-rundeps@20240517.225231 - › - openssl/libssl3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - apk-tools/apk-tools@2.14.0-r5 - › - openssl/libssl3@3.1.4-r6 - - - -
                                                        • -
                                                      • - Introduced through: - docker-image|redis@7.0.15-alpine - › - busybox/ssl_client@1.36.1-r15 - › - openssl/libssl3@3.1.4-r6 - - - -
                                                        • -
                                                      - -
                                                      - -
                                                      - -

                                                      NVD Description

                                                      -

                                                      Note: Versions mentioned in the description apply only to the upstream openssl package and not the openssl package as distributed by Alpine. - See How to fix? for Alpine:3.19 relevant fixed versions and status.

                                                      -

                                                      Issue summary: Checking excessively long DSA keys or parameters may be very - slow.

                                                      -

                                                      Impact summary: Applications that use the functions EVP_PKEY_param_check() - or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may - experience long delays. Where the key or parameters that are being checked - have been obtained from an untrusted source this may lead to a Denial of - Service.

                                                      -

                                                      The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform - various checks on DSA parameters. Some of those computations take a long time - if the modulus (p parameter) is too large.

                                                      -

                                                      Trying to use a very large modulus is slow and OpenSSL will not allow using - public keys with a modulus which is over 10,000 bits in length for signature - verification. However the key and parameter check functions do not limit - the modulus size when performing the checks.

                                                      -

                                                      An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check() - and supplies a key or parameters obtained from an untrusted source could be - vulnerable to a Denial of Service attack.

                                                      -

                                                      These functions are not called by OpenSSL itself on untrusted DSA keys so - only applications that directly call these functions may be vulnerable.

                                                      -

                                                      Also vulnerable are the OpenSSL pkey and pkeyparam command line applications - when using the -check option.

                                                      -

                                                      The OpenSSL SSL/TLS implementation is not affected by this issue.

                                                      -

                                                      The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.

                                                      -

                                                      Remediation

                                                      -

                                                      Upgrade Alpine:3.19 openssl to version 3.1.5-r0 or higher.

                                                      -

                                                      References

                                                      - - -
                                                      - -
                                                      -

                                                      More about this vulnerability

                                                      -
                                                      - -
                                                      -
                                                      -
                                                      -
                                                      - - - diff --git a/docs/snyk/v2.9.15/argocd-iac-install.html b/docs/snyk/v2.9.16/argocd-iac-install.html similarity index 99% rename from docs/snyk/v2.9.15/argocd-iac-install.html rename to docs/snyk/v2.9.16/argocd-iac-install.html index 0b5a39cb59647..0b546c7f0f290 100644 --- a/docs/snyk/v2.9.15/argocd-iac-install.html +++ b/docs/snyk/v2.9.16/argocd-iac-install.html @@ -456,7 +456,7 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:10:54 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:24:54 am (UTC+00:00)

                                                      Scanned the following path: diff --git a/docs/snyk/v2.9.15/argocd-iac-namespace-install.html b/docs/snyk/v2.9.16/argocd-iac-namespace-install.html similarity index 99% rename from docs/snyk/v2.9.15/argocd-iac-namespace-install.html rename to docs/snyk/v2.9.16/argocd-iac-namespace-install.html index 34e6f9cd32163..b671bdf60d6c3 100644 --- a/docs/snyk/v2.9.15/argocd-iac-namespace-install.html +++ b/docs/snyk/v2.9.16/argocd-iac-namespace-install.html @@ -456,7 +456,7 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:11:04 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:25:04 am (UTC+00:00)

                                                      Scanned the following path: diff --git a/docs/snyk/v2.9.15/argocd-test.html b/docs/snyk/v2.9.16/argocd-test.html similarity index 99% rename from docs/snyk/v2.9.15/argocd-test.html rename to docs/snyk/v2.9.16/argocd-test.html index 821b947b7b1de..a1e0515fe2965 100644 --- a/docs/snyk/v2.9.15/argocd-test.html +++ b/docs/snyk/v2.9.16/argocd-test.html @@ -456,7 +456,7 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:08:56 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:22:59 am (UTC+00:00)

                                                      Scanned the following paths: diff --git a/docs/snyk/v2.10.10/ghcr.io_dexidp_dex_v2.37.0.html b/docs/snyk/v2.9.16/ghcr.io_dexidp_dex_v2.37.0.html similarity index 99% rename from docs/snyk/v2.10.10/ghcr.io_dexidp_dex_v2.37.0.html rename to docs/snyk/v2.9.16/ghcr.io_dexidp_dex_v2.37.0.html index f4e309f100513..ca5ef437303df 100644 --- a/docs/snyk/v2.10.10/ghcr.io_dexidp_dex_v2.37.0.html +++ b/docs/snyk/v2.9.16/ghcr.io_dexidp_dex_v2.37.0.html @@ -456,7 +456,7 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:06:31 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:23:06 am (UTC+00:00)

                                                      Scanned the following paths: diff --git a/docs/snyk/v2.11.1/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html b/docs/snyk/v2.9.16/haproxy_2.6.14-alpine.html similarity index 91% rename from docs/snyk/v2.11.1/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html rename to docs/snyk/v2.9.16/haproxy_2.6.14-alpine.html index 29ef9c7fffcfc..e92c7d4b77a33 100644 --- a/docs/snyk/v2.11.1/public.ecr.aws_docker_library_haproxy_2.6.14-alpine.html +++ b/docs/snyk/v2.9.16/haproxy_2.6.14-alpine.html @@ -456,12 +456,12 @@

                                                      Snyk test report

                                                      -

                                                      May 22nd 2024, 5:04:06 pm (UTC+00:00)

                                                      +

                                                      May 26th 2024, 12:23:10 am (UTC+00:00)

                                                      Scanned the following path:
                                                        -
                                                      • public.ecr.aws/docker/library/haproxy:2.6.14-alpine/docker/library/haproxy (apk)
                                                        • +
                                                      • haproxy:2.6.14-alpine (apk)
                                                      @@ -476,8 +476,8 @@

                                                      Snyk test report

    Project docker-image|public.ecr.aws/docker/library/haproxy
    Path public.ecr.aws/docker/library/haproxy:2.6.14-alpine/docker/library/haproxy
    Project docker-image|haproxy
    Path haproxy:2.6.14-alpine
    Package Manager apk
    - - + + @@ -507,7 +507,7 @@

    CVE-2023-5363

  • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    • @@ -520,7 +520,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -529,7 +529,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -540,7 +540,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -551,7 +551,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -562,7 +562,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -575,7 +575,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -584,7 +584,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -595,7 +595,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -606,7 +606,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -699,7 +699,7 @@

      Improper Check for Unusual or Exceptional Conditions

      Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -712,7 +712,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -721,7 +721,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -732,7 +732,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -743,7 +743,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -754,7 +754,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -767,7 +767,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -776,7 +776,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -787,7 +787,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -798,7 +798,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -883,7 +883,7 @@

      Out-of-bounds Write

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -896,7 +896,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -905,7 +905,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -916,7 +916,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -927,7 +927,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -938,7 +938,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -951,7 +951,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -960,7 +960,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -971,7 +971,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -982,7 +982,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1072,7 +1072,7 @@

      CVE-2024-0727

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1085,7 +1085,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1094,7 +1094,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1105,7 +1105,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1116,7 +1116,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1127,7 +1127,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1140,7 +1140,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1149,7 +1149,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1160,7 +1160,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1171,7 +1171,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1248,7 +1248,7 @@

      Out-of-bounds Write

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and busybox/busybox@1.36.1-r2 + docker-image|haproxy@2.6.14-alpine and busybox/busybox@1.36.1-r2
    @@ -1261,7 +1261,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/busybox@1.36.1-r2 @@ -1270,7 +1270,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › alpine-baselayout/alpine-baselayout@3.4.3-r1 › @@ -1283,7 +1283,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/busybox-binsh@1.36.1-r2 @@ -1292,7 +1292,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › alpine-baselayout/alpine-baselayout@3.4.3-r1 › @@ -1303,7 +1303,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 @@ -1356,7 +1356,7 @@

      CVE-2023-6237

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1369,7 +1369,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1378,7 +1378,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1389,7 +1389,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1400,7 +1400,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1411,7 +1411,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1424,7 +1424,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1433,7 +1433,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1444,7 +1444,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1455,7 +1455,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1533,7 +1533,7 @@

      CVE-2024-2511

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1546,7 +1546,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1555,7 +1555,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1566,7 +1566,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1577,7 +1577,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1588,7 +1588,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1601,7 +1601,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1610,7 +1610,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1621,7 +1621,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1632,7 +1632,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1707,7 +1707,7 @@

      CVE-2024-4603

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0 + docker-image|haproxy@2.6.14-alpine and openssl/libcrypto3@3.1.2-r0
    @@ -1720,7 +1720,7 @@

    Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libcrypto3@3.1.2-r0 @@ -1729,7 +1729,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1740,7 +1740,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1751,7 +1751,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › @@ -1762,7 +1762,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1775,7 +1775,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › openssl/libssl3@3.1.2-r0 @@ -1784,7 +1784,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › .haproxy-rundeps@20230809.001942 › @@ -1795,7 +1795,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › apk-tools/apk-tools@2.14.0-r2 › @@ -1806,7 +1806,7 @@

      Detailed paths

    • Introduced through: - docker-image|public.ecr.aws/docker/library/haproxy@2.6.14-alpine + docker-image|haproxy@2.6.14-alpine › busybox/ssl_client@1.36.1-r2 › diff --git a/docs/snyk/v2.9.15/quay.io_argoproj_argocd_v2.9.15.html b/docs/snyk/v2.9.16/quay.io_argoproj_argocd_v2.9.16.html similarity index 97% rename from docs/snyk/v2.9.15/quay.io_argoproj_argocd_v2.9.15.html rename to docs/snyk/v2.9.16/quay.io_argoproj_argocd_v2.9.16.html index 095dfc7e40fb1..e45a7cc8e2c99 100644 --- a/docs/snyk/v2.9.15/quay.io_argoproj_argocd_v2.9.15.html +++ b/docs/snyk/v2.9.16/quay.io_argoproj_argocd_v2.9.16.html @@ -456,16 +456,16 @@

      Snyk test report

      -

      May 22nd 2024, 5:09:33 pm (UTC+00:00)

      +

      May 26th 2024, 12:23:31 am (UTC+00:00)

      Scanned the following paths:
        -
      • quay.io/argoproj/argocd:v2.9.15/argoproj/argocd/Dockerfile (deb)
        • -
      • quay.io/argoproj/argocd:v2.9.15/argoproj/argo-cd/v2//usr/local/bin/argocd (gomodules)
        • -
      • quay.io/argoproj/argocd:v2.9.15//usr/local/bin/kustomize (gomodules)
        • -
      • quay.io/argoproj/argocd:v2.9.15/helm/v3//usr/local/bin/helm (gomodules)
        • -
      • quay.io/argoproj/argocd:v2.9.15/git-lfs/git-lfs//usr/bin/git-lfs (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.9.16/argoproj/argocd/Dockerfile (deb)
        • +
      • quay.io/argoproj/argocd:v2.9.16/argoproj/argo-cd/v2//usr/local/bin/argocd (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.9.16//usr/local/bin/kustomize (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.9.16/helm/v3//usr/local/bin/helm (gomodules)
        • +
      • quay.io/argoproj/argocd:v2.9.16/git-lfs/git-lfs//usr/bin/git-lfs (gomodules)
      @@ -492,7 +492,7 @@

      Denial of Service (DoS)

      • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argo-cd/v2 › /usr/local/bin/argocd
      • Package Manager: golang @@ -574,7 +574,7 @@

        Allocation of Resources Without Limits or Throttling

      • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argo-cd/v2 › /usr/local/bin/argocd
      • Package Manager: golang @@ -654,7 +654,7 @@

        CVE-2020-22916

        • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
        • Package Manager: ubuntu:22.04 @@ -667,7 +667,7 @@

          CVE-2020-22916

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and xz-utils/liblzma5@5.2.5-2ubuntu1 + docker-image|quay.io/argoproj/argocd@v2.9.16 and xz-utils/liblzma5@5.2.5-2ubuntu1
        @@ -680,7 +680,7 @@

        Detailed paths

        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › xz-utils/liblzma5@5.2.5-2ubuntu1 @@ -730,7 +730,7 @@

          Information Exposure

          • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
          • Package Manager: ubuntu:22.04 @@ -743,7 +743,7 @@

            Information Exposure

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and libgcrypt20@1.9.4-3ubuntu3 + docker-image|quay.io/argoproj/argocd@v2.9.16 and libgcrypt20@1.9.4-3ubuntu3
          @@ -756,7 +756,7 @@

          Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › libgcrypt20@1.9.4-3ubuntu3 @@ -765,7 +765,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/dirmngr@2.2.27-3ubuntu2.1 › @@ -776,7 +776,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -787,7 +787,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › apt@2.4.12 › @@ -800,7 +800,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › apt@2.4.12 › @@ -813,7 +813,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -826,7 +826,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -839,7 +839,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -852,7 +852,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -865,7 +865,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -878,7 +878,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -891,7 +891,7 @@

            Detailed paths

          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › apt@2.4.12 › @@ -943,7 +943,7 @@

            CVE-2024-26462

            • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
            • Package Manager: ubuntu:22.04 @@ -956,7 +956,7 @@

              CVE-2024-26462

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.9.16 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
            @@ -969,7 +969,7 @@

            Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -978,7 +978,7 @@

              Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -999,7 +999,7 @@

              Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -1022,7 +1022,7 @@

              Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -1031,7 +1031,7 @@

              Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -1052,7 +1052,7 @@

              Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -1061,7 +1061,7 @@

              Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -1072,7 +1072,7 @@

              Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git@1:2.34.1-1ubuntu1.10 › @@ -1085,7 +1085,7 @@

              Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git@1:2.34.1-1ubuntu1.10 › @@ -1100,7 +1100,7 @@

              Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -1119,7 +1119,7 @@

              Detailed paths

            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -1164,7 +1164,7 @@

              LGPL-3.0 license

              • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argo-cd/v2 › /usr/local/bin/argocd
              • Package Manager: golang @@ -1224,7 +1224,7 @@

                MPL-2.0 license

                • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                • Package Manager: golang @@ -1284,7 +1284,7 @@

                  MPL-2.0 license

                  • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                  • Package Manager: golang @@ -1344,7 +1344,7 @@

                    MPL-2.0 license

                    • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                    • Package Manager: golang @@ -1404,7 +1404,7 @@

                      MPL-2.0 license

                      • - Manifest file: quay.io/argoproj/argocd:v2.9.15/helm/v3 › /usr/local/bin/helm + Manifest file: quay.io/argoproj/argocd:v2.9.16/helm/v3 › /usr/local/bin/helm
                      • Package Manager: golang @@ -1464,7 +1464,7 @@

                        MPL-2.0 license

                        • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                        • Package Manager: golang @@ -1524,7 +1524,7 @@

                          MPL-2.0 license

                          • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argo-cd/v2 › /usr/local/bin/argocd + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argo-cd/v2 › /usr/local/bin/argocd
                          • Package Manager: golang @@ -1584,7 +1584,7 @@

                            CVE-2023-7008

                            • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                            • Package Manager: ubuntu:22.04 @@ -1597,7 +1597,7 @@

                              CVE-2023-7008

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and systemd/libsystemd0@249.11-0ubuntu3.12 + docker-image|quay.io/argoproj/argocd@v2.9.16 and systemd/libsystemd0@249.11-0ubuntu3.12
                            @@ -1610,7 +1610,7 @@

                            Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › systemd/libsystemd0@249.11-0ubuntu3.12 @@ -1619,7 +1619,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › apt@2.4.12 › @@ -1630,7 +1630,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › procps/libprocps8@2:3.3.17-6ubuntu2.1 › @@ -1641,7 +1641,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › util-linux@2.37.2-4ubuntu3.4 › @@ -1652,7 +1652,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › util-linux/bsdutils@1:2.37.2-4ubuntu3.4 › @@ -1663,7 +1663,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › apt@2.4.12 › @@ -1676,7 +1676,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › systemd/libudev1@249.11-0ubuntu3.12 @@ -1685,7 +1685,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › libfido2/libfido2-1@1.10.0-1 › @@ -1696,7 +1696,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › util-linux@2.37.2-4ubuntu3.4 › @@ -1707,7 +1707,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › apt@2.4.12 › @@ -1740,6 +1740,7 @@

                              References

                            • https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QHNBXGKJWISJETTTDTZKTBFIBJUOSLKL/
                            • https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4GMDEG5PKONWNHOEYSUDRT6JEOISRMN2/
                            • https://access.redhat.com/errata/RHSA-2024:2463
                              • +
                            • https://access.redhat.com/errata/RHSA-2024:3203
                            @@ -1761,7 +1762,7 @@

                            Arbitrary Code Injection

                            • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                            • Package Manager: ubuntu:22.04 @@ -1774,7 +1775,7 @@

                              Arbitrary Code Injection

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and shadow/passwd@1:4.8.1-2ubuntu2.2 + docker-image|quay.io/argoproj/argocd@v2.9.16 and shadow/passwd@1:4.8.1-2ubuntu2.2
                            @@ -1787,7 +1788,7 @@

                            Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › shadow/passwd@1:4.8.1-2ubuntu2.2 @@ -1796,7 +1797,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -1807,7 +1808,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -1818,7 +1819,7 @@

                              Detailed paths

                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › shadow/login@1:4.8.1-2ubuntu2.2 @@ -1865,7 +1866,7 @@

                              Uncontrolled Recursion

                              • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                              • Package Manager: ubuntu:22.04 @@ -1878,7 +1879,7 @@

                                Uncontrolled Recursion

                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and pcre3/libpcre3@2:8.39-13ubuntu0.22.04.1 + docker-image|quay.io/argoproj/argocd@v2.9.16 and pcre3/libpcre3@2:8.39-13ubuntu0.22.04.1
                              @@ -1891,7 +1892,7 @@

                              Detailed paths

                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › pcre3/libpcre3@2:8.39-13ubuntu0.22.04.1 @@ -1900,7 +1901,7 @@

                                Detailed paths

                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › grep@3.7-1build1 › @@ -1953,7 +1954,7 @@

                                Release of Invalid Pointer or Reference

                                • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                • Package Manager: ubuntu:22.04 @@ -1966,7 +1967,7 @@

                                  Release of Invalid Pointer or Reference

                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and patch@2.7.6-7build2 + docker-image|quay.io/argoproj/argocd@v2.9.16 and patch@2.7.6-7build2
                                @@ -1979,7 +1980,7 @@

                                Detailed paths

                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › patch@2.7.6-7build2 @@ -2023,7 +2024,7 @@

                                  Double Free

                                  • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                  • Package Manager: ubuntu:22.04 @@ -2036,7 +2037,7 @@

                                    Double Free

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and patch@2.7.6-7build2 + docker-image|quay.io/argoproj/argocd@v2.9.16 and patch@2.7.6-7build2
                                  @@ -2049,7 +2050,7 @@

                                  Detailed paths

                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › patch@2.7.6-7build2 @@ -2098,7 +2099,7 @@

                                    CVE-2023-50495

                                    • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                    • Package Manager: ubuntu:22.04 @@ -2111,7 +2112,7 @@

                                      CVE-2023-50495

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and ncurses/libtinfo6@6.3-2ubuntu0.1 + docker-image|quay.io/argoproj/argocd@v2.9.16 and ncurses/libtinfo6@6.3-2ubuntu0.1
                                    @@ -2124,7 +2125,7 @@

                                    Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/libtinfo6@6.3-2ubuntu0.1 @@ -2133,7 +2134,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › bash@5.1-6ubuntu1.1 › @@ -2144,7 +2145,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/libncursesw6@6.3-2ubuntu0.1 › @@ -2155,7 +2156,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › less@590-1ubuntu0.22.04.3 › @@ -2166,7 +2167,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › libedit/libedit2@3.1-20210910-1build1 › @@ -2177,7 +2178,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/libncurses6@6.3-2ubuntu0.1 › @@ -2188,7 +2189,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/ncurses-bin@6.3-2ubuntu0.1 › @@ -2199,7 +2200,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › procps@2:3.3.17-6ubuntu2.1 › @@ -2210,7 +2211,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › util-linux@2.37.2-4ubuntu3.4 › @@ -2221,7 +2222,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -2236,7 +2237,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2251,7 +2252,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/libncursesw6@6.3-2ubuntu0.1 @@ -2260,7 +2261,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › procps@2:3.3.17-6ubuntu2.1 › @@ -2271,7 +2272,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2286,7 +2287,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/libncurses6@6.3-2ubuntu0.1 @@ -2295,7 +2296,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › procps@2:3.3.17-6ubuntu2.1 › @@ -2306,7 +2307,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/ncurses-base@6.3-2ubuntu0.1 @@ -2315,7 +2316,7 @@

                                      Detailed paths

                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/ncurses-bin@6.3-2ubuntu0.1 @@ -2362,7 +2363,7 @@

                                      CVE-2023-45918

                                      • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                      • Package Manager: ubuntu:22.04 @@ -2375,7 +2376,7 @@

                                        CVE-2023-45918

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and ncurses/libtinfo6@6.3-2ubuntu0.1 + docker-image|quay.io/argoproj/argocd@v2.9.16 and ncurses/libtinfo6@6.3-2ubuntu0.1
                                      @@ -2388,7 +2389,7 @@

                                      Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/libtinfo6@6.3-2ubuntu0.1 @@ -2397,7 +2398,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › bash@5.1-6ubuntu1.1 › @@ -2408,7 +2409,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/libncursesw6@6.3-2ubuntu0.1 › @@ -2419,7 +2420,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › less@590-1ubuntu0.22.04.3 › @@ -2430,7 +2431,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › libedit/libedit2@3.1-20210910-1build1 › @@ -2441,7 +2442,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/libncurses6@6.3-2ubuntu0.1 › @@ -2452,7 +2453,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/ncurses-bin@6.3-2ubuntu0.1 › @@ -2463,7 +2464,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › procps@2:3.3.17-6ubuntu2.1 › @@ -2474,7 +2475,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › util-linux@2.37.2-4ubuntu3.4 › @@ -2485,7 +2486,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -2500,7 +2501,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2515,7 +2516,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/libncursesw6@6.3-2ubuntu0.1 @@ -2524,7 +2525,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › procps@2:3.3.17-6ubuntu2.1 › @@ -2535,7 +2536,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -2550,7 +2551,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/libncurses6@6.3-2ubuntu0.1 @@ -2559,7 +2560,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › procps@2:3.3.17-6ubuntu2.1 › @@ -2570,7 +2571,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/ncurses-base@6.3-2ubuntu0.1 @@ -2579,7 +2580,7 @@

                                        Detailed paths

                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › ncurses/ncurses-bin@6.3-2ubuntu0.1 @@ -2624,7 +2625,7 @@

                                        Resource Exhaustion

                                        • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                        • Package Manager: ubuntu:22.04 @@ -2637,7 +2638,7 @@

                                          Resource Exhaustion

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and libzstd/libzstd1@1.4.8+dfsg-3build1 + docker-image|quay.io/argoproj/argocd@v2.9.16 and libzstd/libzstd1@1.4.8+dfsg-3build1
                                        @@ -2650,7 +2651,7 @@

                                        Detailed paths

                                        • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › libzstd/libzstd1@1.4.8+dfsg-3build1 @@ -2701,7 +2702,7 @@

                                          Integer Overflow or Wraparound

                                          • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                          • Package Manager: ubuntu:22.04 @@ -2714,7 +2715,7 @@

                                            Integer Overflow or Wraparound

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.9.16 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
                                          @@ -2727,7 +2728,7 @@

                                          Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -2736,7 +2737,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -2757,7 +2758,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -2780,7 +2781,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -2789,7 +2790,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -2810,7 +2811,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -2819,7 +2820,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -2830,7 +2831,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git@1:2.34.1-1ubuntu1.10 › @@ -2843,7 +2844,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git@1:2.34.1-1ubuntu1.10 › @@ -2858,7 +2859,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -2877,7 +2878,7 @@

                                            Detailed paths

                                          • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -2925,7 +2926,7 @@

                                            CVE-2024-26461

                                            • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                            • Package Manager: ubuntu:22.04 @@ -2938,7 +2939,7 @@

                                              CVE-2024-26461

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.9.16 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
                                            @@ -2951,7 +2952,7 @@

                                            Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -2960,7 +2961,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -2981,7 +2982,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -3004,7 +3005,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -3013,7 +3014,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -3034,7 +3035,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -3043,7 +3044,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -3054,7 +3055,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git@1:2.34.1-1ubuntu1.10 › @@ -3067,7 +3068,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git@1:2.34.1-1ubuntu1.10 › @@ -3082,7 +3083,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -3101,7 +3102,7 @@

                                              Detailed paths

                                            • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -3146,7 +3147,7 @@

                                              CVE-2024-26458

                                              • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                              • Package Manager: ubuntu:22.04 @@ -3159,7 +3160,7 @@

                                                CVE-2024-26458

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and krb5/libk5crypto3@1.19.2-2ubuntu0.3 + docker-image|quay.io/argoproj/argocd@v2.9.16 and krb5/libk5crypto3@1.19.2-2ubuntu0.3
                                              @@ -3172,7 +3173,7 @@

                                              Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libk5crypto3@1.19.2-2ubuntu0.3 @@ -3181,7 +3182,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -3202,7 +3203,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -3225,7 +3226,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libkrb5-3@1.19.2-2ubuntu0.3 @@ -3234,7 +3235,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -3255,7 +3256,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libgssapi-krb5-2@1.19.2-2ubuntu0.3 @@ -3264,7 +3265,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › openssh/openssh-client@1:8.9p1-3ubuntu0.7 › @@ -3275,7 +3276,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git@1:2.34.1-1ubuntu1.10 › @@ -3288,7 +3289,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git@1:2.34.1-1ubuntu1.10 › @@ -3303,7 +3304,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › adduser@3.118ubuntu5 › @@ -3322,7 +3323,7 @@

                                                Detailed paths

                                              • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › krb5/libkrb5support0@1.19.2-2ubuntu0.3 @@ -3367,7 +3368,7 @@

                                                Out-of-bounds Write

                                                • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                                • Package Manager: ubuntu:22.04 @@ -3380,7 +3381,7 @@

                                                  Out-of-bounds Write

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and gnupg2/gpgv@2.2.27-3ubuntu2.1 + docker-image|quay.io/argoproj/argocd@v2.9.16 and gnupg2/gpgv@2.2.27-3ubuntu2.1
                                                @@ -3393,7 +3394,7 @@

                                                Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpgv@2.2.27-3ubuntu2.1 @@ -3402,7 +3403,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › apt@2.4.12 › @@ -3413,7 +3414,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3424,7 +3425,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/dirmngr@2.2.27-3ubuntu2.1 › @@ -3435,7 +3436,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpg@2.2.27-3ubuntu2.1 › @@ -3446,7 +3447,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3459,7 +3460,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3472,7 +3473,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/dirmngr@2.2.27-3ubuntu2.1 @@ -3481,7 +3482,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3492,7 +3493,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3505,7 +3506,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg-l10n@2.2.27-3ubuntu2.1 @@ -3514,7 +3515,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3525,7 +3526,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg-utils@2.2.27-3ubuntu2.1 @@ -3534,7 +3535,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3545,7 +3546,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpg@2.2.27-3ubuntu2.1 @@ -3554,7 +3555,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3565,7 +3566,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3578,7 +3579,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3591,7 +3592,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpg-agent@2.2.27-3ubuntu2.1 @@ -3600,7 +3601,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3611,7 +3612,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3624,7 +3625,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3637,7 +3638,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpg-wks-client@2.2.27-3ubuntu2.1 @@ -3646,7 +3647,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3657,7 +3658,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpg-wks-server@2.2.27-3ubuntu2.1 @@ -3666,7 +3667,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3677,7 +3678,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gpgsm@2.2.27-3ubuntu2.1 @@ -3686,7 +3687,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 › @@ -3697,7 +3698,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gnupg2/gnupg@2.2.27-3ubuntu2.1 @@ -3746,7 +3747,7 @@

                                                  Allocation of Resources Without Limits or Throttling

                                                • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                                • Package Manager: ubuntu:22.04 @@ -3759,7 +3760,7 @@

                                                  Allocation of Resources Without Limits or Throttling

                                                  Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and glibc/libc-bin@2.35-0ubuntu3.7 + docker-image|quay.io/argoproj/argocd@v2.9.16 and glibc/libc-bin@2.35-0ubuntu3.7
                                                @@ -3772,7 +3773,7 @@

                                                Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › glibc/libc-bin@2.35-0ubuntu3.7 @@ -3781,7 +3782,7 @@

                                                  Detailed paths

                                                • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › glibc/libc6@2.35-0ubuntu3.7 @@ -3827,7 +3828,7 @@

                                                  Improper Input Validation

                                                  • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                                  • Package Manager: ubuntu:22.04 @@ -3841,7 +3842,7 @@

                                                    Improper Input Validation

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15, git@1:2.34.1-1ubuntu1.10 and others + docker-image|quay.io/argoproj/argocd@v2.9.16, git@1:2.34.1-1ubuntu1.10 and others
                                                  @@ -3853,7 +3854,7 @@

                                                  Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git@1:2.34.1-1ubuntu1.10 › @@ -3864,7 +3865,7 @@

                                                    Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git@1:2.34.1-1ubuntu1.10 @@ -3873,7 +3874,7 @@

                                                    Detailed paths

                                                  • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › git-lfs@3.0.2-1ubuntu0.2 › @@ -3920,7 +3921,7 @@

                                                    Uncontrolled Recursion

                                                    • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                                    • Package Manager: ubuntu:22.04 @@ -3933,7 +3934,7 @@

                                                      Uncontrolled Recursion

                                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and gcc-12/libstdc++6@12.3.0-1ubuntu1~22.04 + docker-image|quay.io/argoproj/argocd@v2.9.16 and gcc-12/libstdc++6@12.3.0-1ubuntu1~22.04
                                                    @@ -3946,7 +3947,7 @@

                                                    Detailed paths

                                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gcc-12/libstdc++6@12.3.0-1ubuntu1~22.04 @@ -3955,7 +3956,7 @@

                                                      Detailed paths

                                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › apt@2.4.12 › @@ -3966,7 +3967,7 @@

                                                      Detailed paths

                                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › apt@2.4.12 › @@ -3979,7 +3980,7 @@

                                                      Detailed paths

                                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gcc-12/gcc-12-base@12.3.0-1ubuntu1~22.04 @@ -3988,7 +3989,7 @@

                                                      Detailed paths

                                                    • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › gcc-12/libgcc-s1@12.3.0-1ubuntu1~22.04 @@ -4035,7 +4036,7 @@

                                                      Improper Input Validation

                                                      • - Manifest file: quay.io/argoproj/argocd:v2.9.15/argoproj/argocd › Dockerfile + Manifest file: quay.io/argoproj/argocd:v2.9.16/argoproj/argocd › Dockerfile
                                                      • Package Manager: ubuntu:22.04 @@ -4048,7 +4049,7 @@

                                                        Improper Input Validation

                                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 and coreutils@8.32-4.1ubuntu1.2 + docker-image|quay.io/argoproj/argocd@v2.9.16 and coreutils@8.32-4.1ubuntu1.2
                                                      @@ -4061,7 +4062,7 @@

                                                      Detailed paths

                                                      • Introduced through: - docker-image|quay.io/argoproj/argocd@v2.9.15 + docker-image|quay.io/argoproj/argocd@v2.9.16 › coreutils@8.32-4.1ubuntu1.2 diff --git a/docs/snyk/v2.9.16/redis_7.0.15-alpine.html b/docs/snyk/v2.9.16/redis_7.0.15-alpine.html new file mode 100644 index 0000000000000..cbeaee86c57d8 --- /dev/null +++ b/docs/snyk/v2.9.16/redis_7.0.15-alpine.html @@ -0,0 +1,484 @@ + + + + + + + + + Snyk test report + + + + + + + + + +
                                                        +
                                                        +
                                                        +
                                                        + + + Snyk - Open Source Security + + + + + + + +
                                                        +

                                                        Snyk test report

                                                        + +

                                                        May 26th 2024, 12:23:38 am (UTC+00:00)

                                                        +
                                                        +
                                                        + Scanned the following paths: +
                                                          +
                                                        • redis:7.0.15-alpine (apk)
                                                          • +
                                                        • redis:7.0.15-alpine/tianon/gosu//usr/local/bin/gosu (gomodules)
                                                          • +
                                                        +
                                                        + +
                                                        +
                                                        0 known vulnerabilities
                                                        +
                                                        0 vulnerable dependency paths
                                                        +
                                                        18 dependencies
                                                        +
                                                        +
                                                        +
                                                        +
                                                        + +
                                                        + No known vulnerabilities detected. +
                                                        +
                                                        + + + diff --git a/docs/user-guide/commands/argocd_cluster_list.md b/docs/user-guide/commands/argocd_cluster_list.md index 9779a4fb8af0b..3e03f1581648f 100644 --- a/docs/user-guide/commands/argocd_cluster_list.md +++ b/docs/user-guide/commands/argocd_cluster_list.md @@ -15,7 +15,7 @@ argocd cluster list [flags] # List Clusters in Default "Wide" Format argocd cluster list -# List Cluster via specifing the server +# List Cluster via specifying the server argocd cluster list --server # List Clusters in JSON Format diff --git a/docs/user-guide/commands/argocd_proj_windows_disable-manual-sync.md b/docs/user-guide/commands/argocd_proj_windows_disable-manual-sync.md index e3b84ac38cc0e..3f01015395f1b 100644 --- a/docs/user-guide/commands/argocd_proj_windows_disable-manual-sync.md +++ b/docs/user-guide/commands/argocd_proj_windows_disable-manual-sync.md @@ -19,7 +19,7 @@ argocd proj windows disable-manual-sync PROJECT ID [flags] #Disable manual sync for a sync window for the Project argocd proj windows disable-manual-sync PROJECT ID -#Disbaling manual sync for a windows set on the default project with Id 0 +#Disabling manual sync for a windows set on the default project with Id 0 argocd proj windows disable-manual-sync default 0 ``` diff --git a/manifests/base/repo-server/argocd-repo-server-deployment.yaml b/manifests/base/repo-server/argocd-repo-server-deployment.yaml index 4e2f0afdf557e..0e86acd3e3b5e 100644 --- a/manifests/base/repo-server/argocd-repo-server-deployment.yaml +++ b/manifests/base/repo-server/argocd-repo-server-deployment.yaml @@ -209,6 +209,12 @@ spec: key: reposerver.grpc.max.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_INCLUDE_HIDDEN_DIRECTORIES + valueFrom: + configMapKeyRef: + key: reposerver.include.hidden.directories + name: argocd-cmd-params-cm + optional: true - name: HELM_CACHE_HOME value: /helm-working-dir - name: HELM_CONFIG_HOME diff --git a/manifests/core-install.yaml b/manifests/core-install.yaml index 13a65b1fc7d0c..2a2b88ce5f41f 100644 --- a/manifests/core-install.yaml +++ b/manifests/core-install.yaml @@ -21682,6 +21682,12 @@ spec: key: reposerver.grpc.max.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_INCLUDE_HIDDEN_DIRECTORIES + valueFrom: + configMapKeyRef: + key: reposerver.include.hidden.directories + name: argocd-cmd-params-cm + optional: true - name: HELM_CACHE_HOME value: /helm-working-dir - name: HELM_CONFIG_HOME diff --git a/manifests/ha/install.yaml b/manifests/ha/install.yaml index 97a669eaf8bff..eaff9b09a0510 100644 --- a/manifests/ha/install.yaml +++ b/manifests/ha/install.yaml @@ -23257,6 +23257,12 @@ spec: key: reposerver.grpc.max.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_INCLUDE_HIDDEN_DIRECTORIES + valueFrom: + configMapKeyRef: + key: reposerver.include.hidden.directories + name: argocd-cmd-params-cm + optional: true - name: HELM_CACHE_HOME value: /helm-working-dir - name: HELM_CONFIG_HOME diff --git a/manifests/ha/namespace-install.yaml b/manifests/ha/namespace-install.yaml index 09c7559ca2765..157ebd9bad946 100644 --- a/manifests/ha/namespace-install.yaml +++ b/manifests/ha/namespace-install.yaml @@ -2279,6 +2279,12 @@ spec: key: reposerver.grpc.max.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_INCLUDE_HIDDEN_DIRECTORIES + valueFrom: + configMapKeyRef: + key: reposerver.include.hidden.directories + name: argocd-cmd-params-cm + optional: true - name: HELM_CACHE_HOME value: /helm-working-dir - name: HELM_CONFIG_HOME diff --git a/manifests/install.yaml b/manifests/install.yaml index 66e86a488a362..b1daa1ea712f4 100644 --- a/manifests/install.yaml +++ b/manifests/install.yaml @@ -22327,6 +22327,12 @@ spec: key: reposerver.grpc.max.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_INCLUDE_HIDDEN_DIRECTORIES + valueFrom: + configMapKeyRef: + key: reposerver.include.hidden.directories + name: argocd-cmd-params-cm + optional: true - name: HELM_CACHE_HOME value: /helm-working-dir - name: HELM_CONFIG_HOME diff --git a/manifests/namespace-install.yaml b/manifests/namespace-install.yaml index ea69f57bd03f6..a1b2b31f0265d 100644 --- a/manifests/namespace-install.yaml +++ b/manifests/namespace-install.yaml @@ -1349,6 +1349,12 @@ spec: key: reposerver.grpc.max.size name: argocd-cmd-params-cm optional: true + - name: ARGOCD_REPO_SERVER_INCLUDE_HIDDEN_DIRECTORIES + valueFrom: + configMapKeyRef: + key: reposerver.include.hidden.directories + name: argocd-cmd-params-cm + optional: true - name: HELM_CACHE_HOME value: /helm-working-dir - name: HELM_CONFIG_HOME diff --git a/pkg/apis/application/v1alpha1/applicationset_types.go b/pkg/apis/application/v1alpha1/applicationset_types.go index 0715f9c02e96d..1439b4ccaf9ca 100644 --- a/pkg/apis/application/v1alpha1/applicationset_types.go +++ b/pkg/apis/application/v1alpha1/applicationset_types.go @@ -763,7 +763,7 @@ type ApplicationSetStatus struct { Resources []ResourceStatus `json:"resources,omitempty" protobuf:"bytes,3,opt,name=resources"` } -// ApplicationSetCondition contains details about an applicationset condition, which is usally an error or warning +// ApplicationSetCondition contains details about an applicationset condition, which is usually an error or warning type ApplicationSetCondition struct { // Type is an applicationset condition type Type ApplicationSetConditionType `json:"type" protobuf:"bytes,1,opt,name=type"` diff --git a/pkg/apis/application/v1alpha1/generated.proto b/pkg/apis/application/v1alpha1/generated.proto index 78cc7e2ba85f8..21c806dbcc9bd 100644 --- a/pkg/apis/application/v1alpha1/generated.proto +++ b/pkg/apis/application/v1alpha1/generated.proto @@ -199,7 +199,7 @@ message ApplicationSetApplicationStatus { optional string step = 5; } -// ApplicationSetCondition contains details about an applicationset condition, which is usally an error or warning +// ApplicationSetCondition contains details about an applicationset condition, which is usually an error or warning message ApplicationSetCondition { // Type is an applicationset condition type optional string type = 1; diff --git a/pkg/apis/application/v1alpha1/openapi_generated.go b/pkg/apis/application/v1alpha1/openapi_generated.go index 993fee43e3ee5..0ad6197376517 100644 --- a/pkg/apis/application/v1alpha1/openapi_generated.go +++ b/pkg/apis/application/v1alpha1/openapi_generated.go @@ -867,7 +867,7 @@ func schema_pkg_apis_application_v1alpha1_ApplicationSetCondition(ref common.Ref return common.OpenAPIDefinition{ Schema: spec.Schema{ SchemaProps: spec.SchemaProps{ - Description: "ApplicationSetCondition contains details about an applicationset condition, which is usally an error or warning", + Description: "ApplicationSetCondition contains details about an applicationset condition, which is usually an error or warning", Type: []string{"object"}, Properties: map[string]spec.Schema{ "type": { diff --git a/reposerver/repository/repository.go b/reposerver/repository/repository.go index 3e88582bb50b6..ac738cd513d19 100644 --- a/reposerver/repository/repository.go +++ b/reposerver/repository/repository.go @@ -112,6 +112,7 @@ type RepoServerInitConstants struct { HelmManifestMaxExtractedSize int64 HelmRegistryMaxIndexSize int64 DisableHelmManifestMaxExtractedSize bool + IncludeHiddenDirectories bool } // NewService returns a new instance of the Manifest service @@ -2197,7 +2198,7 @@ func populatePluginAppDetails(ctx context.Context, res *apiclient.RepoAppDetails announcement, err := parametersAnnouncementStream.CloseAndRecv() if err != nil { - return fmt.Errorf("failed to get parameter anouncement: %w", err) + return fmt.Errorf("failed to get parameter announcement: %w", err) } res.Plugin = &apiclient.PluginAppSpec{ @@ -2650,9 +2651,8 @@ func (s *Service) GetGitDirectories(_ context.Context, request *apiclient.GitDir return nil } - fname := entry.Name() - if strings.HasPrefix(fname, ".") { // Skip all folders starts with "." - return filepath.SkipDir + if !s.initConstants.IncludeHiddenDirectories && strings.HasPrefix(entry.Name(), ".") { + return filepath.SkipDir // Skip hidden directory } relativePath, err := filepath.Rel(repoRoot, path) diff --git a/reposerver/repository/repository_test.go b/reposerver/repository/repository_test.go index 0f3c5b06d5f10..14c877d3b42c9 100644 --- a/reposerver/repository/repository_test.go +++ b/reposerver/repository/repository_test.go @@ -3339,6 +3339,39 @@ func TestGetGitDirectories(t *testing.T) { }) } +func TestGetGitDirectoriesWithHiddenDirSupported(t *testing.T) { + // test not using the cache + root := "./testdata/git-files-dirs" + s, _, cacheMocks := newServiceWithOpt(t, func(gitClient *gitmocks.Client, helmClient *helmmocks.Client, paths *iomocks.TempPaths) { + gitClient.On("Init").Return(nil) + gitClient.On("Fetch", mock.Anything).Return(nil) + gitClient.On("Checkout", mock.Anything, mock.Anything).Once().Return(nil) + gitClient.On("LsRemote", "HEAD").Return("632039659e542ed7de0c170a4fcc1c571b288fc0", nil) + gitClient.On("Root").Return(root) + paths.On("GetPath", mock.Anything).Return(root, nil) + paths.On("GetPathIfExists", mock.Anything).Return(root, nil) + }, root) + s.initConstants.IncludeHiddenDirectories = true + dirRequest := &apiclient.GitDirectoriesRequest{ + Repo: &argoappv1.Repository{Repo: "a-url.com"}, + SubmoduleEnabled: false, + Revision: "HEAD", + } + directories, err := s.GetGitDirectories(context.TODO(), dirRequest) + assert.Nil(t, err) + assert.ElementsMatch(t, directories.GetPaths(), []string{"app", "app/bar", "app/foo/bar", "somedir", "app/foo", "app/bar/.hidden"}) + + // do the same request again to use the cache + // we only allow CheckOut to be called once in the mock + directories, err = s.GetGitDirectories(context.TODO(), dirRequest) + assert.Nil(t, err) + assert.ElementsMatch(t, []string{"app", "app/bar", "app/foo/bar", "somedir", "app/foo", "app/bar/.hidden"}, directories.GetPaths()) + cacheMocks.mockCache.AssertCacheCalledTimes(t, &repositorymocks.CacheCallCounts{ + ExternalSets: 1, + ExternalGets: 2, + }) +} + func TestErrorGetGitFiles(t *testing.T) { // test not using the cache root := "" diff --git a/server/extension/extension.go b/server/extension/extension.go index 9f8edcd6184fc..4fa1b648a833f 100644 --- a/server/extension/extension.go +++ b/server/extension/extension.go @@ -50,7 +50,7 @@ const ( // that the Argo CD application is associated with. This header // will be populated by the extension proxy and passed to the // configured backend service. If this header is passed by - // the client, its value will be overriden by the extension + // the client, its value will be overridden by the extension // handler. // // Example: @@ -61,7 +61,7 @@ const ( // that the Argo CD application is associated with. This header // will be populated by the extension proxy and passed to the // configured backend service. If this header is passed by - // the client, its value will be overriden by the extension + // the client, its value will be overridden by the extension // handler. HeaderArgoCDTargetClusterName = "Argocd-Target-Cluster-Name" ) @@ -719,7 +719,7 @@ func registerMetrics(extName string, metrics httpsnoop.Metrics, extensionMetrics } } -// prepareRequest is reponsible for cleaning the incoming request URL removing +// prepareRequest is responsible for cleaning the incoming request URL removing // the Argo CD extension API section from it. It will set the cluster destination name // and cluster destination server in the headers as it is defined in the given app. func prepareRequest(r *http.Request, extName string, app *v1alpha1.Application) { diff --git a/test/container/Dockerfile b/test/container/Dockerfile index 8540ccaed451e..f2cda455b9cfa 100644 --- a/test/container/Dockerfile +++ b/test/container/Dockerfile @@ -1,4 +1,4 @@ -FROM docker.io/library/redis:7.2.5@sha256:b32ea6ea4d5b38496c6e93d02083e97f461cb09d6b8672462b53071236ef4b12 as redis +FROM docker.io/library/redis:7.2.5@sha256:01afb31d6d633451d84475ff3eb95f8c48bf0ee59ec9c948b161adb4da882053 as redis # There are libraries we will want to copy from here in the final stage of the # build, but the COPY directive does not have a way to determine system diff --git a/test/e2e/fixture/applicationsets/utils/fixture.go b/test/e2e/fixture/applicationsets/utils/fixture.go index d4e23e5f5415d..35a809ddf9981 100644 --- a/test/e2e/fixture/applicationsets/utils/fixture.go +++ b/test/e2e/fixture/applicationsets/utils/fixture.go @@ -81,7 +81,7 @@ func TestNamespace() string { return GetEnvWithDefault("ARGOCD_E2E_NAMESPACE", ArgoCDNamespace) } -// GetE2EFixtureK8sClient initializes the Kubernetes clients (if needed), and returns the most recently initalized value. +// GetE2EFixtureK8sClient initializes the Kubernetes clients (if needed), and returns the most recently initialized value. // Note: this requires a local Kubernetes configuration (for example, while running the E2E tests). func GetE2EFixtureK8sClient() *E2EFixtureK8sClient { // Initialize the Kubernetes clients only on first use diff --git a/test/e2e/fixture/fixture.go b/test/e2e/fixture/fixture.go index f8dd60cb74974..4910b4251f022 100644 --- a/test/e2e/fixture/fixture.go +++ b/test/e2e/fixture/fixture.go @@ -568,7 +568,7 @@ func EnsureCleanState(t *testing.T, opts ...TestOption) { opt := newTestOption(opts...) // In large scenarios, we can skip tests that already run SkipIfAlreadyRun(t) - // Register this test after it has been run & was successfull + // Register this test after it has been run & was successful t.Cleanup(func() { RecordTestRun(t) }) diff --git a/ui-test/package.json b/ui-test/package.json index da2f3256c6942..f55aa1d6a0fbe 100644 --- a/ui-test/package.json +++ b/ui-test/package.json @@ -19,7 +19,7 @@ }, "devDependencies": { "@types/mocha": "^10.0.6", - "@types/node": "^20.12.12", + "@types/node": "^20.12.13", "dotenv": "^16.4.5", "mocha": "^10.4.0", "prettier": "^2.8.8", diff --git a/ui-test/yarn.lock b/ui-test/yarn.lock index 06654e765c77b..bdaa3536cd0f0 100644 --- a/ui-test/yarn.lock +++ b/ui-test/yarn.lock @@ -38,10 +38,10 @@ resolved "https://registry.yarnpkg.com/@types/mocha/-/mocha-10.0.6.tgz#818551d39113081048bdddbef96701b4e8bb9d1b" integrity sha512-dJvrYWxP/UcXm36Qn36fxhUKu8A/xMRXVT2cliFF1Z7UA9liG5Psj3ezNSZw+5puH2czDXRLcXQxf8JbJt0ejg== -"@types/node@*", "@types/node@^20.12.12": - version "20.12.12" - resolved "https://registry.yarnpkg.com/@types/node/-/node-20.12.12.tgz#7cbecdf902085cec634fdb362172dfe12b8f2050" - integrity sha512-eWLDGF/FOSPtAvEqeRAQ4C8LSA7M1I7i0ky1I8U7kD1J5ITyW3AsRhQrKVoWf5pFKZ2kILsEGJhsI9r93PYnOw== +"@types/node@*", "@types/node@^20.12.13": + version "20.12.13" + resolved "https://registry.yarnpkg.com/@types/node/-/node-20.12.13.tgz#90ed3b8a4e52dd3c5dc5a42dde5b85b74ad8ed88" + integrity sha512-gBGeanV41c1L171rR7wjbMiEpEI/l5XFQdLLfhr/REwpgDy/4U8y89+i8kRiLzDyZdOkXh+cRaTetUnCYutoXA== dependencies: undici-types "~5.26.4" diff --git a/ui/package.json b/ui/package.json index 4849a8bafb7f3..430dec7707152 100644 --- a/ui/package.json +++ b/ui/package.json @@ -11,7 +11,7 @@ "test": "jest" }, "dependencies": { - "@fortawesome/fontawesome-free": "^6.4.0", + "@fortawesome/fontawesome-free": "^6.5.2", "@types/react-virtualized": "^9.21.21", "@types/superagent": "^8.1.6", "ansi-to-react": "^6.1.6", @@ -105,16 +105,16 @@ "html-webpack-plugin": "^5.6.0", "identity-obj-proxy": "^3.0.0", "jest": "^29.7.0", + "jest-environment-jsdom": "^29.7.0", "jest-junit": "^6.4.0", "jest-transform-css": "^2.0.0", - "jest-environment-jsdom": "^29.7.0", - "monaco-editor-webpack-plugin": "^7.0.0", + "monaco-editor-webpack-plugin": "^7.1.0", "postcss": "^8.4.38", "prettier": "^3.2.5", "raw-loader": "^0.5.1", "react-test-renderer": "16.8.3", "sass": "^1.49.9", - "sass-loader": "^12.6.0", + "sass-loader": "^14.2.1", "source-map-loader": "^0.2.3", "style-loader": "^0.20.1", "ts-jest": "^29.1.2", diff --git a/ui/src/app/applications/components/resource-details/resource-details.tsx b/ui/src/app/applications/components/resource-details/resource-details.tsx index 580bea554344d..8dea158c9b22e 100644 --- a/ui/src/app/applications/components/resource-details/resource-details.tsx +++ b/ui/src/app/applications/components/resource-details/resource-details.tsx @@ -264,6 +264,7 @@ export const ResourceDetails = (props: ResourceDetailsProps) => { }))) || []; let podState: State; + let childResources: models.ResourceNode[] = []; if (selectedNode.kind === 'Pod') { podState = liveState; } else { @@ -271,6 +272,7 @@ export const ResourceDetails = (props: ResourceDetailsProps) => { if (childPod) { podState = await services.applications.getResource(application.metadata.name, application.metadata.namespace, childPod).catch(() => null); } + childResources = AppUtils.findChildResources(selectedNode, tree); } const settings = await services.authService.settings(); @@ -278,7 +280,7 @@ export const ResourceDetails = (props: ResourceDetailsProps) => { const logsAllowed = await services.accounts.canI('logs', 'get', application.spec.project + '/' + application.metadata.name); const execAllowed = execEnabled && (await services.accounts.canI('exec', 'create', application.spec.project + '/' + application.metadata.name)); const links = await services.applications.getResourceLinks(application.metadata.name, application.metadata.namespace, selectedNode).catch(() => null); - return {controlledState, liveState, events, podState, execEnabled, execAllowed, logsAllowed, links}; + return {controlledState, liveState, events, podState, execEnabled, execAllowed, logsAllowed, links, childResources}; }}> {data => ( @@ -303,7 +305,7 @@ export const ResourceDetails = (props: ResourceDetailsProps) => { SYNC
    Project docker-image|public.ecr.aws/docker/library/haproxy
    Path public.ecr.aws/docker/library/haproxy:2.6.14-alpine/docker/library/haproxy
    Project docker-image|haproxy
    Path haproxy:2.6.14-alpine
    Package Manager apk