frep
frep copied to clipboard
subchen
Security Update
Hello, in the meantime thank you very much for the great tool. Our container security scanning tool (Trivy) shows few security issues caused by the frep tool. Could you update the package below? Thank you very much in advance Francesco
| Vulnerability: | CVE-2020-29652 |
|---|---|
| Severity: | High |
| nvd: | 7.5 |
| redhat: | 7.5 |
| Package: | golang.org/x/crypto |
| Current Version: | v0.0.0-20190308221718-c2843e01d9a2 |
| Fixed in Version: | 0.0.0-20201216223049-8b5274cf687f |
| Vulnerability: | CVE-2020-7919 |
| Severity: | High |
| nvd: | 7.5 |
| redhat: | 7.5 |
| Package: | golang.org/x/crypto |
| Current Version: | v0.0.0-20190308221718-c2843e01d9a2 |
| Fixed in Version: | 0.0.0-20200124225646-8b5121be2f68 |
| Vulnerability: | CVE-2020-9283 |
| Severity: | High |
| nvd: | 7.5 |
| redhat: | 7.5 |
| Package: | golang.org/x/crypto |
| Current Version: | v0.0.0-20190308221718-c2843e01d9a2 |
| Fixed in Version: | 0.0.0-20200220183623-bac4c82f6975 |
| Vulnerability: | CVE-2021-43565 |
| Severity: | High |
| nvd: | 7.5 |
| redhat: | 7.5 |
| Package: | golang.org/x/crypto |
| Current Version: | v0.0.0-20190308221718-c2843e01d9a2 |
| Fixed in Version: | 0.0.0-20211202192323-5770296d904e |
| Vulnerability: | CVE-2022-27191 |
| Severity: | High |
| nvd: | 7.5 |
| redhat: | 7.5 |
| Package: | golang.org/x/crypto |
| Current Version: | v0.0.0-20190308221718-c2843e01d9a2 |
| Fixed in Version: | 0.0.0-20220314234659-1baeb1ce4c0b |
| Vulnerability: | CVE-2020-8911 |
| Severity: | Medium |
| nvd: | 5.6 |
| redhat: | 5.6 |
| Package: | github.com/aws/aws-sdk-go |
| Current Version: | v1.30.29 |
| Fixed in Version: | |
| Vulnerability: | CVE-2019-11254 |
| Severity: | Medium |
| nvd: | 6.5 |
| redhat: | 6.5 |
| Package: | github.com/go-yaml/yaml |
| Current Version: | v2.1.0+incompatible |
| Fixed in Version: | |
| Vulnerability: | CVE-2019-11840 |
| Severity: | Medium |
| nvd: | 5.9 |
| redhat: | 5.9 |
| Package: | golang.org/x/crypto |
| Current Version: | v0.0.0-20190308221718-c2843e01d9a2 |
| Fixed in Version: | 0.0.0-20190320223903-b7391e95e576 |
| Vulnerability: | CVE-2021-4235 |
| Severity: | |
| nvd: | |
| redhat: | github.com/go-yaml/yaml |
| Package: | |
| Current Version: | v2.1.0+incompatibleNo |
| Fixed in Version: | |
| Vulnerability: | CVE-2022-2582 |
| Severity: | |
| nvd: | |
| redhat: | |
| Package: | github.com/aws/aws-sdk-go |
| Current Version: | v1.30.29 |
| Fixed in Version: | |
| Vulnerability: | CVE-2020-8912 |
| Severity: | Low |
| nvd: | 2.5 |
| redhat: | 2.5 |
| Package: | github.com/aws/aws-sdk-go |
| Current Version: | v1.30.29 |
| Fixed in Version: |
Vulnerability: CVE-2020-29652 Severity: High nvd: 7.5 redhat: 7.5 Package: golang.org/x/crypto Current Version: v0.0.0-20190308221718-c2843e01d9a2 Fixed in Version: 0.0.0-20201216223049-8b5274cf687f
Vulnerability: CVE-2020-7919 Severity: High nvd: 7.5 redhat: 7.5 Package: golang.org/x/crypto Current Version: v0.0.0-20190308221718-c2843e01d9a2 Fixed in Version: 0.0.0-20200124225646-8b5121be2f68
Vulnerability: CVE-2020-9283 Severity: High nvd: 7.5 redhat: 7.5 Package: golang.org/x/crypto Current Version: v0.0.0-20190308221718-c2843e01d9a2 Fixed in Version: 0.0.0-20200220183623-bac4c82f6975
Vulnerability: CVE-2021-43565 Severity: High nvd: 7.5 redhat: 7.5 Package: golang.org/x/crypto Current Version: v0.0.0-20190308221718-c2843e01d9a2 Fixed in Version: 0.0.0-20211202192323-5770296d904e
Vulnerability: CVE-2022-27191 Severity: High nvd: 7.5 redhat: 7.5 Package: golang.org/x/crypto Current Version: v0.0.0-20190308221718-c2843e01d9a2 Fixed in Version: 0.0.0-20220314234659-1baeb1ce4c0b
Vulnerability: CVE-2020-8911 Severity: Medium nvd: 5.6 redhat: 5.6 Package: github.com/aws/aws-sdk-go Current Version: v1.30.29 Fixed in Version:
Vulnerability: CVE-2019-11254 Severity: Medium nvd: 6.5 redhat: 6.5 Package: github.com/go-yaml/yaml Current Version: v2.1.0+incompatible Fixed in Version:
Vulnerability: CVE-2019-11840 Severity: Medium nvd: 5.9 redhat: 5.9 Package: golang.org/x/crypto Current Version: v0.0.0-20190308221718-c2843e01d9a2 Fixed in Version: 0.0.0-20190320223903-b7391e95e576
Vulnerability: CVE-2021-4235 Severity: nvd: redhat: github.com/go-yaml/yaml Package: Current Version: v2.1.0+incompatibleNo Fixed in Version:
Vulnerability: CVE-2022-2582 Severity: nvd: redhat: Package: github.com/aws/aws-sdk-go Current Version: v1.30.29 Fixed in Version:
Vulnerability: CVE-2020-8912 Severity: Low nvd: 2.5 redhat: 2.5 Package: github.com/aws/aws-sdk-go Current Version: v1.30.29 Fixed in Version:
