thle40

Results 8 comments of thle40

The list of CVEs above also report for new version v0.14.5

the mention images are uploaded to dockerhub

Echo on this topic and I would like to add more Critical CVEs found with later twistlock version which put our system into high risk state curl [CVE-2022-43551](https://github.com/advisories/GHSA-25m2-mpq4-29vh) bash [CVE-2022-3715](https://github.com/advisories/GHSA-cr4j-fv7c-759c)...

With new version of twistlock, more critical CVEs found which impact to security of our system **go** - [CVE-2022-27191](https://nvd.nist.gov/vuln/detail/CVE-2022-27191) - [CVE-2022-21698](https://nvd.nist.gov/vuln/detail/CVE-2022-21698) - [CVE-2021-43565](https://nvd.nist.gov/vuln/detail/CVE-2021-43565) - [PRISMA-2022-0164](https://github.com/aws/aws-sdk-go/commit/f4fe6f318f21ab75ade22ac51cba751c0af16939) - [CVE-2021-31525](https://nvd.nist.gov/vuln/detail/CVE-2021-31525) **OS** - [CVE-2023-0215](https://nvd.nist.gov/vuln/detail/CVE-2023-0215)...

More CVEs reported for this release CVE | SEVERITY | CVSS | PACKAGE | VERSION | STATUS -- | -- | -- | -- | -- | -- CVE-2016-5397 |...

latest scan has reported the new CVE for this version [CVE-2024-24786](https://www.cve.org/CVERecord?id=CVE-2024-24786) | google.golang.org/protobuf/internal/encoding/json v1.31.0

more cves are reported for this version CVE | SEVERITY | CVSS | PACKAGE | VERSION | FIX IN -- | -- | -- | -- | -- | --...

multiple CVEs are resolved in latest version, the new reported CVEs are informed in https://github.com/cadence-workflow/cadence/issues/7185