CVE-2024-36127
2 advisories.
Go/chainguard.dev/apko CVE-2024-36127: high 7.5, EPSS 0.44%
apko Exposure of HTTP basic auth credentials in log output
Action: Upgrade chainguard.dev/apko to 0.14.5 or later.
go get chainguard.dev/apko@v0.14.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.14.5 | - |
Fixed versions
| 0.14.5 |
Sources
- osv: GHSA-v6mg-7f7p-qmqp
- https://github.com/chainguard-dev/apko/security/advisories/GHSA-v6mg-7f7p-qmqp
- https://nvd.nist.gov/vuln/detail/CVE-2024-36127
- https://github.com/chainguard-dev/apko/commit/2c0533e4d52e83031a04f6a83ec63fc2a11eff01
- https://github.com/chainguard-dev/apko
CVE-2024-36127 · published · modified · JSON
Go/chainguard.dev/apko CVE-2024-36127: unknown, EPSS 0.44%
apko Exposure of HTTP basic auth credentials in log output in chainguard.dev/apko
Action: Upgrade chainguard.dev/apko to 0.14.5 or later.
go get chainguard.dev/apko@v0.14.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.14.5 | - |
Fixed versions
| 0.14.5 |
Sources
- osv: GO-2024-2899
- https://github.com/chainguard-dev/apko/security/advisories/GHSA-v6mg-7f7p-qmqp
- https://nvd.nist.gov/vuln/detail/CVE-2024-36127
- https://github.com/chainguard-dev/apko/commit/2c0533e4d52e83031a04f6a83ec63fc2a11eff01
CVE-2024-36127 · published · modified · JSON