tocsin

CVE-2024-35192

2 advisories.

Go/github.com/aquasecurity/trivy CVE-2024-35192: medium 5.5

Trivy possibly leaks registry credential when scanning images from malicious registries

Action: Upgrade github.com/aquasecurity/trivy to 0.51.2 or later.

go get github.com/aquasecurity/trivy@v0.51.2

Affected

introducedfixedlast affected
00.51.2-

Fixed versions

0.51.2

Sources

CVE-2024-35192 · published · modified · JSON

Go/github.com/aquasecurity/trivy CVE-2024-35192: unknown

Credential leakage in github.com/aquasecurity/trivy

Action: Upgrade github.com/aquasecurity/trivy to 0.51.2 or later.

go get github.com/aquasecurity/trivy@v0.51.2

Affected

introducedfixedlast affected
00.51.2-

Fixed versions

0.51.2

Sources

CVE-2024-35192 · published · modified · JSON