testkube-tw-init-2.12.1_linux_arm64

digest	sha256:b41d782cea3ce23a441ea9a09656cc6c283f0cbec5085701012232b18f85b912
vulnerabilities
platform	linux/arm64
size	17 MB
packages	178

github.com/docker/cli 29.5.3+incompatible (golang) pkg:golang/github.com/docker/cli@29.5.3%2Bincompatible # tw-init.Dockerfile (22:22) COPY --from=build /app/testworkflow-init /init Affected range >=19.03.0+incompatible Fixed version Not Fixed EPSS Score 0.472% EPSS Percentile 38th percentile Description Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli

golang.org/x/crypto 0.54.0 (golang) pkg:golang/golang.org/x/crypto@0.54.0 # tw-init.Dockerfile (22:22) COPY --from=build /app/testworkflow-init /init Affected range >=0 Fixed version Not Fixed Description The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained fork that aims to be a drop-in replacement for this package.

github.com/klauspost/compress 1.18.6 (golang) pkg:golang/github.com/klauspost/compress@1.18.6 # tw-init.Dockerfile (22:22) COPY --from=build /app/testworkflow-init /init Affected range >=1.16.0 <1.18.7 Fixed version 1.18.7 Description Providing a specially crafted dictionary to s2.NewDict and using it to encode data can make the encoder read out of bounds.