sindre
/
Beelance
Volgen 1
Ster 0
Vork 0
Code Kwesties 6 Pull-aanvragen 0 Publicaties 0 Wiki Activiteit
Labels Mijlpalen
Nieuw probleem

#27 Nginx known vulnerabilities

Open
5 jaren geleden werd geopend door sindre · 0 opmerkingen
sindre reageerde 5 jaren geleden

NGINX 1.15.8 contains known vulnerabilities. This package is installed when the base image (tiangolo/uwsgi-nginx:python3.7) is built. You may inspect the Dockerfile to see how that pans out:https://github.com/tiangolo/uwsgi-nginx-docker/blob/master/python3.7/Dockerfile​ .

Mitigating this vulnerability requires changing the installation of NGINX within this Dockerfile.

NGINX 1.15.8 contains known vulnerabilities. This package is installed when the base image (tiangolo/uwsgi-nginx:python3.7) is built. You may inspect the Dockerfile to see how that pans out:https://github.com/tiangolo/uwsgi-nginx-docker/blob/master/python3.7/Dockerfile​ . Mitigating this vulnerability requires changing the installation of NGINX within this Dockerfile.
sindre added this to the Optional vulnerabilities milestone 5 jaren geleden
sindre added the
nginx
label 5 jaren geleden
sindre added the
known vulnerability
label 5 jaren geleden
sindre added the
bug
label 5 jaren geleden
Log in om deel te nemen aan deze discussie.
Geen Branch/Tag gespecificeerd
Branches Labels
Labels
Verwijder labels
broken access control
Broken access control vulnerability broken authentication
Broken authentication vulnerability bug
Something is not working csrf
Cross site request forgery vulnerability enhancement
New feature injection
Injection vulnerability insecure deserialization
Insecure deserialization vulnerability known vulnerability
Using components with known vulnerabilities logging
Insufficient logging vulnerability nginx
Concerns nginx security misconfiguration
Security misconfiguration vulnerability sensitive data exposure
Sensitive data exposure vulnerability webpy
Concerns the webpy framework
Geen label
broken access control
broken authentication
bug
csrf
enhancement
injection
insecure deserialization
known vulnerability
logging
nginx
security misconfiguration
sensitive data exposure
webpy
Mijlpaal
Verwijder mijlpaal
Geen mijlpaal
Optional vulnerabilities
Toegewezen aan
Verwijder toegewezen aan
Niet toegewezen
1 deelnemers
Vervaldatum

Geen vervaldatum ingesteld.

Afhankelijkheden

Deze kwestie heeft momenteel geen afhankelijkheden.

Schrijf Voorbeeld
Laden…
Annuleren
Opslaan
Er is nog geen inhoud.
Verwijder branch '%!s(MISSING)'

Deleting a branch is permanent. It CANNOT be undone. Continue?

Nee
Ja