sindre
/
Beelance
Vērot 1
Pievienot zvaigznīti 0
Atdalīts 0
Kods Problēmas 6 Izmaiņu pieprasījumi 0 Laidieni 0 Vikivietne Aktivitāte
Etiķetes Atskaites punkti
Jauna problēma

#27 Nginx known vulnerabilities

Atvērta
sindre atvēra pirms 5 gadiem · 0 komentāri
sindre komentēja pirms 5 gadiem

NGINX 1.15.8 contains known vulnerabilities. This package is installed when the base image (tiangolo/uwsgi-nginx:python3.7) is built. You may inspect the Dockerfile to see how that pans out:https://github.com/tiangolo/uwsgi-nginx-docker/blob/master/python3.7/Dockerfile​ .

Mitigating this vulnerability requires changing the installation of NGINX within this Dockerfile.

NGINX 1.15.8 contains known vulnerabilities. This package is installed when the base image (tiangolo/uwsgi-nginx:python3.7) is built. You may inspect the Dockerfile to see how that pans out:https://github.com/tiangolo/uwsgi-nginx-docker/blob/master/python3.7/Dockerfile​ . Mitigating this vulnerability requires changing the installation of NGINX within this Dockerfile.
sindre pievienoja atskaites punktu Optional vulnerabilities pirms 5 gadiem
sindre pievienoja etiķeti
nginx
pirms 5 gadiem
sindre pievienoja etiķeti
known vulnerability
pirms 5 gadiem
sindre pievienoja etiķeti
bug
pirms 5 gadiem
Pierakstieties, lai pievienotos šai sarunai.
Nav norādīts atzars/tags
Atzari Tagi
Etiķetes
Noņemt etiķetes
broken access control
Broken access control vulnerability broken authentication
Broken authentication vulnerability bug
Something is not working csrf
Cross site request forgery vulnerability enhancement
New feature injection
Injection vulnerability insecure deserialization
Insecure deserialization vulnerability known vulnerability
Using components with known vulnerabilities logging
Insufficient logging vulnerability nginx
Concerns nginx security misconfiguration
Security misconfiguration vulnerability sensitive data exposure
Sensitive data exposure vulnerability webpy
Concerns the webpy framework
Nav etiķešu
broken access control
broken authentication
bug
csrf
enhancement
injection
insecure deserialization
known vulnerability
logging
nginx
security misconfiguration
sensitive data exposure
webpy
Atskaites punkts
Notīrīt atskaites punktus
Nav atskaites punktu
Optional vulnerabilities
Atbildīgie
Noņemt atbildīgo
Nav atbildīgo
1 dalībnieki
Izpildes termiņš

Izpildes termiņš nav uzstādīts.

Atkarības

Šai problēmai pagaidām nav nevienas atkarības.

Rakstīt Priekšskatītījums
Notiek ielāde…
Atcelt
Saglabāt
Vēl nav satura.
Dzēst atzaru '%!s(MISSING)'

Atzara dzēšana ir neatgriezeniska, kā arī tā ir NEATGRIEZENISKA. Vai turpināt?

Nē
Jā