New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Critical vulnerability CVE-2024-32002 found in dependencies installed in ckan-base #82

Open

brunopacheco1 opened this issue Sep 27, 2024 · 1 comment

Assignees

brunopacheco1 commented Sep 27, 2024

CKAN base image installs git and other packages, in

ckan-docker-base/ckan-2.10/base/Dockerfile

Line 32 in dea7460

RUN apk add --no-cache git \

Some of these packages where reported by Trivy as vulnerable, please check our CI/CD logs: https://github.com/GenomicDataInfrastructure/gdi-userportal-ckan-docker/actions/runs/11075521883/job/30776768124

kowh-ai self-assigned this

Author

brunopacheco1 commented Oct 7, 2024

We use ckan 2.10.5, btw.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment