Skip to content

to be continuous

TF_IMAGE

registry.hub.docker.com/hashicorp/terraform:latest (alpine 3.21.1)¶

Trivy Image Scan

Image: registry.hub.docker.com/hashicorp/terraform:latest (alpine 3.21.1)
Scan date: 2025-01-19

registry.hub.docker.com/hashicorp/terraform:latest (alpine 3.21.1) (alpine)¶

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
git	CVE-2024-52006	MEDIUM	2.47.1-r0	2.47.2-r0	https://access.redhat.com/security/cve/CVE-2024-52006 https://github.com/git-ecosystem/git-credential-manager/security/advisories/GHSA-86c2-4x57-wc8g https://github.com/git/git/commit/b01b9b81d36759cdcd07305e78765199e1bc2060 https://github.com/git/git/security/advisories/GHSA-qm7j-c969-7j4q https://github.com/git/git/security/advisories/GHSA-r5ph-xg7q-xfrp https://nvd.nist.gov/vuln/detail/CVE-2024-52006 https://ubuntu.com/security/notices/USN-7207-1 https://www.cve.org/CVERecord?id=CVE-2024-52006
git	CVE-2024-50349	LOW	2.47.1-r0	2.47.2-r0	https://access.redhat.com/security/cve/CVE-2024-50349 https://github.com/git/git/commit/7725b8100ffbbff2750ee4d61a0fcc1f53a086e8 https://github.com/git/git/commit/c903985bf7e772e2d08275c1a95c8a55ab011577 https://github.com/git/git/security/advisories/GHSA-hmg8-h7qf-7cxr https://nvd.nist.gov/vuln/detail/CVE-2024-50349 https://ubuntu.com/security/notices/USN-7207-1 https://www.cve.org/CVERecord?id=CVE-2024-50349
git-init-template	CVE-2024-52006	MEDIUM	2.47.1-r0	2.47.2-r0	https://access.redhat.com/security/cve/CVE-2024-52006 https://github.com/git-ecosystem/git-credential-manager/security/advisories/GHSA-86c2-4x57-wc8g https://github.com/git/git/commit/b01b9b81d36759cdcd07305e78765199e1bc2060 https://github.com/git/git/security/advisories/GHSA-qm7j-c969-7j4q https://github.com/git/git/security/advisories/GHSA-r5ph-xg7q-xfrp https://nvd.nist.gov/vuln/detail/CVE-2024-52006 https://ubuntu.com/security/notices/USN-7207-1 https://www.cve.org/CVERecord?id=CVE-2024-52006
git-init-template	CVE-2024-50349	LOW	2.47.1-r0	2.47.2-r0	https://access.redhat.com/security/cve/CVE-2024-50349 https://github.com/git/git/commit/7725b8100ffbbff2750ee4d61a0fcc1f53a086e8 https://github.com/git/git/commit/c903985bf7e772e2d08275c1a95c8a55ab011577 https://github.com/git/git/security/advisories/GHSA-hmg8-h7qf-7cxr https://nvd.nist.gov/vuln/detail/CVE-2024-50349 https://ubuntu.com/security/notices/USN-7207-1 https://www.cve.org/CVERecord?id=CVE-2024-50349
No Misconfigurations found

bin/terraform (gobinary)¶

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
golang.org/x/crypto	CVE-2024-45337	CRITICAL	v0.27.0	0.31.0	http://www.openwall.com/lists/oss-security/2024/12/11/2 https://access.redhat.com/security/cve/CVE-2024-45337 https://github.com/golang/crypto https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909 https://go.dev/cl/635315 https://go.dev/issue/70779 https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ https://nvd.nist.gov/vuln/detail/CVE-2024-45337 https://pkg.go.dev/vuln/GO-2024-3321 https://www.cve.org/CVERecord?id=CVE-2024-45337
golang.org/x/net	CVE-2024-45338	HIGH	v0.29.0	0.33.0	https://access.redhat.com/security/cve/CVE-2024-45338 https://cs.opensource.google/go/x/net https://github.com/golang/go/issues/70906 https://go-review.googlesource.com/c/net/+/637536 https://go.dev/cl/637536 https://go.dev/issue/70906 https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ https://nvd.nist.gov/vuln/detail/CVE-2024-45338 https://pkg.go.dev/vuln/GO-2024-3333 https://ubuntu.com/security/notices/USN-7197-1 https://www.cve.org/CVERecord?id=CVE-2024-45338
No Misconfigurations found