Christian Dupuis
Christian Dupuis
After a little more inspection of the `Topic.flush` code path, I think the problem with unhandled promises is actually more wide-spread. Take a look at the following line of code...
@carminevassallo, thanks for raising this issue. I think this is a good place to discuss this. We are working on allowing publishers of images, including publishers of Docker Official Images,...
> Good question. I asked for the same thing on the feedback link to the Google form on docker hub (right, top of vulnerabilities when you go into a vulnerability)....
Yeah, that's good point. Was kind of expecting this to become an issue.
@rcollette given this tools is still early in its development, we are currently not planning on signing it. Eventually this will come of course. To still be able to run...
I'm also seeing this error with 4.7.1: ```Caused by: java.lang.UnsatisfiedLinkError: Could not load J2V8 library. Reasons: no libj2v8_linux_x86_64.so in java.library.path no j2v8_linux_x86_64 in java.library.path /home/travis/libj2v8_linux_x86_64.so: /usr/lib/x86_64-linux-gnu/libstdc++.so.6: version `CXXABI_1.3.8' not found...
@MPV thanks for raising this detailed issue. Unfortunately, I'm not able to re-create this issue myself. Would it be possible for you to create a sample repo that re-creates this...
@rawrmonster17 thanks for raising this. Would be possible for you push a public image to a container registry that demonstrates this issue? I’m happy to look into it.
Is there a public image somewhere that would let me reproduce this?
To dig into where this package and thus the CVE is being detected from, it usually easiest to use the `--locations` flag with the `docker scout cves` command. See the...