Skip to content

Commit

Permalink
Merge 4b8bc71 into backport/zalimeni/net-8174-triage-helm-CVE-2024-26147
Browse files Browse the repository at this point in the history
/seemingly-amazing-foal
  • Loading branch information
hc-github-team-consul-core authored Feb 26, 2024
2 parents 20e223f + 4b8bc71 commit 2c3e4c1
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 1 deletion.
2 changes: 2 additions & 0 deletions .release/security-scan.hcl
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,8 @@ binary {
vulnerabilites = [
# NET-8174 (2024-02-20): Chart YAML path traversal (not impacted)
"GHSA-v53g-5gjp-272r", # alias CVE-2024-25620
# NET-8174 (2024-02-26): Missing YAML Content Leads To Panic (requires malicious plugin)
"GHSA-r53h-jv2g-vpx6", # alias CVE-2024-26147
]
}
}
Expand Down
4 changes: 3 additions & 1 deletion scan.hcl
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,9 @@ repository {
]
vulnerabilites = [
# NET-8174 (2024-02-20): Chart YAML path traversal (not impacted)
"GHSA-v53g-5gjp-272r", # alias CVE-2024-25620
"GHSA-v53g-5gjp-272r", # alias CVE-2024-25620
# NET-8174 (2024-02-26): Missing YAML Content Leads To Panic (requires malicious plugin)
"GHSA-r53h-jv2g-vpx6", # alias CVE-2024-26147
]
}
}
Expand Down

0 comments on commit 2c3e4c1

Please sign in to comment.