Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security Vulnerability [BUG] #333

Open
reeshahr opened this issue Jun 30, 2023 · 0 comments
Open

Security Vulnerability [BUG] #333

reeshahr opened this issue Jun 30, 2023 · 0 comments
Labels
bug Something isn't working

Comments

@reeshahr
Copy link

Describe the bug
We are using prometheus-msteams for observability purpose in our organization and after scanning the image, we find out two security vulnerabilities related to promteams (gobinary).

Version
The docker image or release version of prometheus-msteams.
docker image : prometheus-msteams:v1.5.2
[release version of prometheus-msteams.]: prometheus-msteams-1.3.4
To Reproduce
Scan image with trivy tool or review CVE public related to the library used.

Expected behavior
Is it possible that you can help us please to update the library version.

Additional context
CVE: CVE-2020-8911

CVE-2020-8912

Library: github.com/aws/aws-sdk-go

Versión: v1.44.156

Fixed Version: N/A

Link: https://avd.aquasec.com/nvd/cve-2020-8911 , https://avd.aquasec.com/nvd/cve-2020-8912

@reeshahr reeshahr added the bug Something isn't working label Jun 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant