Skip to content

Commit

Permalink
add .trivyignore
Browse files Browse the repository at this point in the history
  • Loading branch information
sebthom committed Jan 20, 2024
1 parent 93fa8a6 commit 81c096b
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions .trivyignore
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
# https://github.com/go-gitea/gitea/pull/28628
CVE-2023-49569
CVE-2023-49568
┌─────────────────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │ Status │ Installed Version │ Fixed Version │ Title │
├─────────────────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────────────────────┤
│ github.com/go-git/go-git/v5 │ CVE-2023-49569 │ CRITICAL │ fixed │ v5.9.0 │ 5.11.0 │ go-git: Maliciously crafted Git server replies can lead to │
│ │ │ │ │ │ │ path traversal and... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2023-49569 │
│ ├────────────────┼──────────┤ │ │ ├──────────────────────────────────────────────────────────────┤
│ │ CVE-2023-49568 │ HIGH │ │ │ │ go-git: Maliciously crafted Git server replies can cause DoS │
│ │ │ │ │ │ │ on go-git clients... │
│ │ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2023-49568 │
└─────────────────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────────────────────┘

0 comments on commit 81c096b

Please sign in to comment.