Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Comments

[Snyk] Security upgrade golang from latest to 1-bullseye#45

Open
snyk-bot wants to merge 1 commit intomaster from
snyk-fix-442b28f0296bb87afa1c0ba6b614d620
Open

[Snyk] Security upgrade golang from latest to 1-bullseye #45
snyk-bot wants to merge 1 commit intomaster from
snyk-fix-442b28f0296bb87afa1c0ba6b614d620

Conversation

@snyk-bot
Copy link

@snyk-bot snyk-bot commented Mar 3, 2022

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

  • vendor/github.com/coreos/etcd/Dockerfile

We recommend upgrading to golang:1-bullseye, as this image has only 94 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

Severity Issue Exploit Maturity
critical severity Integer Overflow or Wraparound
SNYK-DEBIAN11-EXPAT-2359255
No Known Exploit
critical severity Integer Overflow or Wraparound
SNYK-DEBIAN11-EXPAT-2384928
No Known Exploit
critical severity Exposure of Resource to Wrong Sphere
SNYK-DEBIAN11-EXPAT-2403510
No Known Exploit
critical severity Improper Encoding or Escaping of Output
SNYK-DEBIAN11-EXPAT-2403512
No Known Exploit
critical severity Integer Overflow or Wraparound
SNYK-DEBIAN11-EXPAT-2406127
No Known Exploit

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

AltStyle によって変換されたページ (->オリジナル) /