You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
IMO, for this to get a dedicated CVE is insane -- it's really just another instance of literally CVE-2019-5021.
Also, as you've noted, none of the supported versions of this image are actually vulnerable today (nor have they been since it was fixed in the Alpine base image).
(Also, thanks for the great blog post -- I've filed a report at https://cveform.mitre.org/ that these are all duplicates but I'm not holding my breath.)
Someone filed CVE-2020-35197 against your docker image. After looking at your dockerfile I do not think it is vulnerable and should be disputed.
Here is a blog I wrote on the subject.
The text was updated successfully, but these errors were encountered: