sindre
/
Beelance
Bevaka 1
Stjärnmärk 0
Förgrening 0
Kod Ärenden 6 Pull-förfrågningar 0 Släpp 0 Wiki Aktiviteter
Etiketter Milstenar
Nytt Ärende

#27 Nginx known vulnerabilities

Öppen
öppnade 5 år sedan av sindre · 0 kommentarer
sindre kommenterad 5 år sedan

NGINX 1.15.8 contains known vulnerabilities. This package is installed when the base image (tiangolo/uwsgi-nginx:python3.7) is built. You may inspect the Dockerfile to see how that pans out:https://github.com/tiangolo/uwsgi-nginx-docker/blob/master/python3.7/Dockerfile​ .

Mitigating this vulnerability requires changing the installation of NGINX within this Dockerfile.

NGINX 1.15.8 contains known vulnerabilities. This package is installed when the base image (tiangolo/uwsgi-nginx:python3.7) is built. You may inspect the Dockerfile to see how that pans out:https://github.com/tiangolo/uwsgi-nginx-docker/blob/master/python3.7/Dockerfile​ . Mitigating this vulnerability requires changing the installation of NGINX within this Dockerfile.
sindre lade till denna till milstolpe Optional vulnerabilities 5 år sedan
sindre added the
nginx
label 5 år sedan
sindre added the
known vulnerability
label 5 år sedan
sindre added the
bug
label 5 år sedan
Logga in för att delta i denna konversation.
Ingen branch/Tag specificerad
Grenar Taggar
Etiketter
Rensa etiketter
broken access control
Broken access control vulnerability broken authentication
Broken authentication vulnerability bug
Something is not working csrf
Cross site request forgery vulnerability enhancement
New feature injection
Injection vulnerability insecure deserialization
Insecure deserialization vulnerability known vulnerability
Using components with known vulnerabilities logging
Insufficient logging vulnerability nginx
Concerns nginx security misconfiguration
Security misconfiguration vulnerability sensitive data exposure
Sensitive data exposure vulnerability webpy
Concerns the webpy framework
Ingen Etikett
broken access control
broken authentication
bug
csrf
enhancement
injection
insecure deserialization
known vulnerability
logging
nginx
security misconfiguration
sensitive data exposure
webpy
Milsten
Rensa milstenar
Ingen Milsten
Optional vulnerabilities
Tilldelade
Rensa tilldelade
No Assignees
1 Deltagare
Förfallodatum

Inget förfallodatum satt.

Beroenden

This issue currently doesn't have any dependencies.

Write Förhandsgranska
Laddar…
Avbryt
Spara
Det finns inget innehåll än.
Ta bort branch '%!s(MISSING)'

Borttagning utav en branch är permanent. Detta KAN INTE ångras. Vill du fortsätta?

Nej
Ja