-
Bug
-
Resolution: Done
-
Undefined
-
clair-4.7.2
For example quay.io/
The scanner binary depends on golang.org/x/net@v0.14.0 which is definitely susceptible to https://osv.dev/vulnerability/GHSA-4374-p667-p6c8
The issue is likely due to Claircore's handling of OSV SEMVER ecosystems when Introduced is 0.
- relates to
-
PROJQUAY-6618 Quay 3.10.2 can't scan and report all vulnerability of Golang Packages
-
- Closed
-