Security Alert by Trivy #128
Description
zozo-gatling-operator:50c1af41032381762ba859405765cd3efdb02f82 (debian 12.9)
debian [os-pkgs]
No vulnerabilities found
manager
gobinary [lang-pkgs]
| Title | Severity | CVE | Package Name | Installed Version | Fixed Version | PrimaryURL |
|---|---|---|---|---|---|---|
| golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto | 🔴CRITICAL | CVE-2024-45337 | golang.org/x/crypto | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html | 🟠HIGH | CVE-2024-45338 | golang.org/x/net | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
Total count of vulnerabilities: 2