sindre
/
Beelance
Watch 1
Star 0
Fork 0
Code Issues 6 Pull Requests 0 Releases 0 Wiki Activity
Labels Milestones
New Issue

#27 Nginx known vulnerabilities

Open
opened 5 years ago by sindre · 0 comments
sindre commented 5 years ago

NGINX 1.15.8 contains known vulnerabilities. This package is installed when the base image (tiangolo/uwsgi-nginx:python3.7) is built. You may inspect the Dockerfile to see how that pans out:https://github.com/tiangolo/uwsgi-nginx-docker/blob/master/python3.7/Dockerfile​ .

Mitigating this vulnerability requires changing the installation of NGINX within this Dockerfile.

NGINX 1.15.8 contains known vulnerabilities. This package is installed when the base image (tiangolo/uwsgi-nginx:python3.7) is built. You may inspect the Dockerfile to see how that pans out:https://github.com/tiangolo/uwsgi-nginx-docker/blob/master/python3.7/Dockerfile​ . Mitigating this vulnerability requires changing the installation of NGINX within this Dockerfile.
sindre added this to the Optional vulnerabilities milestone 5 years ago
sindre added the
nginx
label 5 years ago
sindre added the
known vulnerability
label 5 years ago
sindre added the
bug
label 5 years ago
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
broken access control
Broken access control vulnerability broken authentication
Broken authentication vulnerability bug
Something is not working csrf
Cross site request forgery vulnerability enhancement
New feature injection
Injection vulnerability insecure deserialization
Insecure deserialization vulnerability known vulnerability
Using components with known vulnerabilities logging
Insufficient logging vulnerability nginx
Concerns nginx security misconfiguration
Security misconfiguration vulnerability sensitive data exposure
Sensitive data exposure vulnerability webpy
Concerns the webpy framework
No Label
broken access control
broken authentication
bug
csrf
enhancement
injection
insecure deserialization
known vulnerability
logging
nginx
security misconfiguration
sensitive data exposure
webpy
Milestone
Clear milestone
No Milestone
Optional vulnerabilities
Assignees
Clear assignees
No Assignees
1 Participants
Due Date

No due date set.

Dependencies

This issue currently doesn't have any dependencies.

Write Preview
Loading…
Cancel
Save
There is no content yet.
Delete Branch '%!s(MISSING)'

Deleting a branch is permanent. It CANNOT be undone. Continue?

No
Yes