Skip to content

Commit

Permalink
security: add scan triage for CVE-2024-26147 (helm/v3)
Browse files Browse the repository at this point in the history
  • Loading branch information
zalimeni committed Feb 26, 2024
1 parent 831624f commit 4b8bc71
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 1 deletion.
2 changes: 2 additions & 0 deletions .release/security-scan.hcl
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,8 @@ binary {
vulnerabilites = [
# NET-8174 (2024-02-20): Chart YAML path traversal (not impacted)
"GHSA-v53g-5gjp-272r", # alias CVE-2024-25620
# NET-8174 (2024-02-26): Missing YAML Content Leads To Panic (requires malicious plugin)
"GHSA-r53h-jv2g-vpx6", # alias CVE-2024-26147
]
}
}
Expand Down
4 changes: 3 additions & 1 deletion scan.hcl
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,9 @@ repository {
]
vulnerabilites = [
# NET-8174 (2024-02-20): Chart YAML path traversal (not impacted)
"GHSA-v53g-5gjp-272r", # alias CVE-2024-25620
"GHSA-v53g-5gjp-272r", # alias CVE-2024-25620
# NET-8174 (2024-02-26): Missing YAML Content Leads To Panic (requires malicious plugin)
"GHSA-r53h-jv2g-vpx6", # alias CVE-2024-26147
]
}
}
Expand Down

0 comments on commit 4b8bc71

Please sign in to comment.