sindre
/
Beelance
Segui 1
Vota 0
Forka 0
Codice Problemi 6 Pull Requests 0 Rilasci 0 Wiki Attività
Etichette Traguardi
Nuovo Problema

#27 Nginx known vulnerabilities

Aperto
aperto 5 anni fa da sindre · 0 commenti
sindre 5 anni fa ha commentato

NGINX 1.15.8 contains known vulnerabilities. This package is installed when the base image (tiangolo/uwsgi-nginx:python3.7) is built. You may inspect the Dockerfile to see how that pans out:https://github.com/tiangolo/uwsgi-nginx-docker/blob/master/python3.7/Dockerfile​ .

Mitigating this vulnerability requires changing the installation of NGINX within this Dockerfile.

NGINX 1.15.8 contains known vulnerabilities. This package is installed when the base image (tiangolo/uwsgi-nginx:python3.7) is built. You may inspect the Dockerfile to see how that pans out:https://github.com/tiangolo/uwsgi-nginx-docker/blob/master/python3.7/Dockerfile​ . Mitigating this vulnerability requires changing the installation of NGINX within this Dockerfile.
sindre aggiunta alle pietre miliari Optional vulnerabilities 5 anni fa
sindre added the
nginx
label 5 anni fa
sindre added the
known vulnerability
label 5 anni fa
sindre added the
bug
label 5 anni fa
Effettua l'accesso per partecipare alla conversazione.
Nessun Branch/Tag specificato
Rami (Branch) Tag
Etichette
Pulisci le etichette
broken access control
Broken access control vulnerability broken authentication
Broken authentication vulnerability bug
Something is not working csrf
Cross site request forgery vulnerability enhancement
New feature injection
Injection vulnerability insecure deserialization
Insecure deserialization vulnerability known vulnerability
Using components with known vulnerabilities logging
Insufficient logging vulnerability nginx
Concerns nginx security misconfiguration
Security misconfiguration vulnerability sensitive data exposure
Sensitive data exposure vulnerability webpy
Concerns the webpy framework
Nessuna etichetta
broken access control
broken authentication
bug
csrf
enhancement
injection
insecure deserialization
known vulnerability
logging
nginx
security misconfiguration
sensitive data exposure
webpy
Traguardo
Milestone pulita
Nessuna milestone
Optional vulnerabilities
Assegnatari
Cancella assegnatari
No Assignees
1 Partecipanti
Data di scadenza

Nessuna data di scadenza impostata.

Dependencies

This issue currently doesn't have any dependencies.

Write Preview
Loading…
Annulla
Salva
Non ci sono ancora contenuti.
Elimina branch '%!s(MISSING)'

L'eliminazione di un branch è definitiva. È un'operazione che NON PUÒ essere annullata. Continuare?

No
Sì