On this page
Security and CVE scan results
Review security and CVE scan results for Solo.io products.
Gloo container images are scanned using Trivy for HIGH and CRITICAL vulnerabilities. To learn more about how Solo.io detects, tracks, and remediates CVEs, see CVE lifecycle handling.
Security and CVE scan
Latest 2.6.x gloo mesh enterprise Release: 2.6.7
gloo mesh enterprise gloo-mesh-istiod-agent image
No scan found
gloo mesh enterprise gloo-mesh-apiserver image
No scan found
gloo mesh enterprise gloo-mesh-ui image
No scan found
gloo mesh enterprise gloo-otel-collector image
No scan found
gloo mesh enterprise gloo-mesh-portal-server image
No scan found
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No scan found
gloo mesh enterprise gloo-mesh-envoy image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No scan found
Release 2.6.6
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.6.6 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.6.6 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.6.6 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.6.6 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.6.6 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.6.6 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.6.6 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.6.6 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/pilot-agent
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.24.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.6.6 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.6.6 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.6.6 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
Release 2.6.5
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.6.5 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.6.5 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.6.5 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.6.5 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.6.5 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.6.5 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.6.5 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.6.5 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/pilot-agent
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v26.1.4+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.24.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.6.5 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.6.5 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.6.5 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.6.4
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.6.4 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.6.4 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.6.4 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.6.4 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.6.4 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.6.4 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.6.4 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.6.4 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/pilot-agent
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v26.1.4+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.24.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.6.4 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.6.4 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.6.4 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.6.3
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.6.3 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.6.3 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.6.3 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.6.3 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.6.3 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.6.3 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.6.3 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.6.3 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.6.3 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.6.3 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.6.3 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.6.2
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.6.2 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.6.2 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.6.2 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.6.2 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.6.2 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.6.2 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.6.2 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.6.2 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.6.2 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.6.2 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.6.2 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.6.1
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.6.1 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.6.1 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.6.1 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.6.1 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.6.1 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.6.1 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.6.1 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.6.1 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.6.1 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.6.1 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.6.1 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.6.0
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.6.0 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.6.0 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.6.0 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.6.0 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.6.0 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.6.0 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.6.0 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.6.0 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.6.0 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.6.0 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.6.0 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.25.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Latest 2.5.x gloo mesh enterprise Release: 2.5.13
gloo mesh enterprise gloo-mesh-istiod-agent image
No scan found
gloo mesh enterprise gloo-mesh-apiserver image
No scan found
gloo mesh enterprise gloo-mesh-ui image
No scan found
gloo mesh enterprise gloo-otel-collector image
No scan found
gloo mesh enterprise gloo-mesh-portal-server image
No scan found
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No scan found
gloo mesh enterprise gloo-mesh-envoy image
No scan found
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No scan found
Release 2.5.12
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.12 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.12 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.12 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.12 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.12 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.12 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.12 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.12 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/pilot-agent
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.24.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.12 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.12 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.12 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
Release 2.5.11
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.11 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.11 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.11 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.11 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.11 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.11 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.11 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.11 (ubuntu 24.04)
Vulnerabilities Listed for usr/local/bin/pilot-agent
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v26.1.4+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.24.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.26.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.11 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.11 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.11 (alpine 3.18.9)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.5.10
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.10 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.10 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.10 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.10 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.10 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.10 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.10 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.10 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.10 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.10 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.10 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v25.0.5+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.25.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.5.9
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.9 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.9 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.9 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.9 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-7jwh-3vrq-q3m8 | github.com/jackc/pgproto3/v2 | HIGH | v2.3.2 | 2.3.3 | https://github.com/advisories/GHSA-7jwh-3vrq-q3m8 |
| CVE-2024-27289 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.9 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.89.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.4 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.4 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.9 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.9 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.9 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.9 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.9 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.9 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.9 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.5.8
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.8 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.8 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.8 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.8 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-7jwh-3vrq-q3m8 | github.com/jackc/pgproto3/v2 | HIGH | v2.3.2 | 2.3.3 | https://github.com/advisories/GHSA-7jwh-3vrq-q3m8 |
| CVE-2024-27289 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.9 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.89.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.4 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.4 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.8 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.8 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.8 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.8 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.8 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.8 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.8 (alpine 3.18.7)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.5.7
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.7 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.7 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.7 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.7 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-7jwh-3vrq-q3m8 | github.com/jackc/pgproto3/v2 | HIGH | v2.3.2 | 2.3.3 | https://github.com/advisories/GHSA-7jwh-3vrq-q3m8 |
| CVE-2024-27289 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.9 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.89.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.23.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.4 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.4 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.7 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.7 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.7 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.7 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.7 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.7 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.7 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.5.6
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.6 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.6 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.6 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.6 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-7jwh-3vrq-q3m8 | github.com/jackc/pgproto3/v2 | HIGH | v2.3.2 | 2.3.3 | https://github.com/advisories/GHSA-7jwh-3vrq-q3m8 |
| CVE-2024-27289 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.9 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.89.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.4 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.4 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.6 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.6 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.6 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.6 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.6 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.6 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.6 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.5.5
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.5 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.5 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.5 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.5 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-7jwh-3vrq-q3m8 | github.com/jackc/pgproto3/v2 | HIGH | v2.3.2 | 2.3.3 | https://github.com/advisories/GHSA-7jwh-3vrq-q3m8 |
| CVE-2024-27289 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.9 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.89.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.4 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.4 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.5 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.5 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.5 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.5 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.5 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.5 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.5 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.5.4
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.4 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.4 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.4 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.4 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-7jwh-3vrq-q3m8 | github.com/jackc/pgproto3/v2 | HIGH | v2.3.2 | 2.3.3 | https://github.com/advisories/GHSA-7jwh-3vrq-q3m8 |
| CVE-2024-27289 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.9 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.89.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.19.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.4 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.4 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.4 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.4 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.4 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.4 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.4 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.4 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.4 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.5.3
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.3 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.3 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.3 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.3 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-7jwh-3vrq-q3m8 | github.com/jackc/pgproto3/v2 | HIGH | v2.3.2 | 2.3.3 | https://github.com/advisories/GHSA-7jwh-3vrq-q3m8 |
| CVE-2024-27289 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.9 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.89.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.19.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.4 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.4 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.3 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.3 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.3 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.3 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.3 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.3 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.3 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.5.2
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.2 (alpine 3.18.6)
No Vulnerabilities Found for usr/local/bin/istiod-agent-linux-amd64
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.2 (alpine 3.18.6)
No Vulnerabilities Found for usr/local/bin/apiserver-linux-amd64
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.2 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.2 (alpine 3.18.5)
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.2 (alpine 3.18.6)
No Vulnerabilities Found for usr/local/bin/portal-server-linux-amd64
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.2 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.2 (alpine 3.18.6)
No Vulnerabilities Found for usr/local/bin/mgmt-server-linux-amd64
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.2 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.2 (alpine 3.18.6)
No Vulnerabilities Found for usr/local/bin/spire-controller-linux-amd64
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.2 (alpine 3.18.6)
No Vulnerabilities Found for usr/local/bin/insights-linux-amd64
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.2 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
Release 2.5.1
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.1 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.1 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.1 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.1 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-7jwh-3vrq-q3m8 | github.com/jackc/pgproto3/v2 | HIGH | v2.3.2 | 2.3.3 | https://github.com/advisories/GHSA-7jwh-3vrq-q3m8 |
| CVE-2024-27289 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.9 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.89.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.4 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.4 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.1 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.1 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.1 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.1 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.1 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.1 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.1 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.5.0
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.5.0 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.5.0 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.5.0 (alpine 3.18.5)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.5.0 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-7jwh-3vrq-q3m8 | github.com/jackc/pgproto3/v2 | HIGH | v2.3.2 | 2.3.3 | https://github.com/advisories/GHSA-7jwh-3vrq-q3m8 |
| CVE-2024-27289 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx/v4 | HIGH | v4.18.1 | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.9 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.89.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.15.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.4 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.4 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.5.0 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-analyzer:2.5.0 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/analyzer-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.2 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.89.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.5.0 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.5.0 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.5.0 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-insights:2.5.0 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/insights-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.5.0 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.7+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.13.2 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Latest 2.4.x gloo mesh enterprise Release: 2.4.16
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.16 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.16 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.16 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.4.16 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.16 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.16 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.16 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.16 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.16 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.15
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.15 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.15 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.15 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.4.15 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.15 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.15 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.15 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.15 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.15 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.14
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.14 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.14 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.14 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.4.14 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.14 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.14 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.14 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.14 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.14 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.13
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.13 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.13 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.13 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.4.13 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.13 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.13 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.13 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.13 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.13 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.12
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.12 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.12 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.12 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.4.12 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.12 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.12 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.12 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.12 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.12 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.0 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.22.0 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.0 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.0 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.11
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.11 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.11 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.11 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.4.11 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.11 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.11 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.11 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.11 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.11 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.10
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.10 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.10 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.10 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.4.10 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.10 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.10 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.10 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.10 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.10 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.9
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.9 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.9 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.9 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.4.9 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.9 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.9 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.9 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.9 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.9 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.8
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.8 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.8 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.8 (alpine 3.18.5)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.4.8 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.8 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.8 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.8 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.8 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.8 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.7
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.7 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.7 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.7 (alpine 3.18.5)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.4.7 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.7 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.7 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.7 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.7 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.7 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.5 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.5 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.5 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.6
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.6 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.6 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.6 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.4.6 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24538 | stdlib | CRITICAL | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24538 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24534 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24534 |
| CVE-2023-24536 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24536 |
| CVE-2023-24537 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24537 |
| CVE-2023-24539 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.19.7 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.7 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.6 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.6 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.6 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.6 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.6 (alpine 3.18.5)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.5
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.5 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.5 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.5 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.4.5 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24538 | stdlib | CRITICAL | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24538 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24534 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24534 |
| CVE-2023-24536 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24536 |
| CVE-2023-24537 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24537 |
| CVE-2023-24539 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.19.7 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.7 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.5 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.5 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.5 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.5 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.5 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.4
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.4 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.4 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.4 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.4.4 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24538 | stdlib | CRITICAL | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24538 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24534 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24534 |
| CVE-2023-24536 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24536 |
| CVE-2023-24537 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24537 |
| CVE-2023-24539 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.19.7 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.7 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.4 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.4 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.4 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.4 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.4 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.13.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.15.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.15.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.3
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.3 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.3 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.3 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.4.3 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24538 | stdlib | CRITICAL | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24538 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24534 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24534 |
| CVE-2023-24536 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24536 |
| CVE-2023-24537 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24537 |
| CVE-2023-24539 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.19.7 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.7 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.3 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.3 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.3 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.3 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.3 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.2
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.2 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.2 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.2 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.4.2 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24538 | stdlib | CRITICAL | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24538 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24534 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24534 |
| CVE-2023-24536 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24536 |
| CVE-2023-24537 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24537 |
| CVE-2023-24539 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.19.7 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.7 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.2 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.2 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.2 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.2 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.2 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.1
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.1 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.1 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.1 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.4.1 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24538 | stdlib | CRITICAL | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24538 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24534 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24534 |
| CVE-2023-24536 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24536 |
| CVE-2023-24537 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24537 |
| CVE-2023-24539 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.19.7 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.7 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.1 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.1 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.1 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.1 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.1 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.13.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.13.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.4.0
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.4.0 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.10.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.11.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.11.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.4.0 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.10.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.11.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.11.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.11.1 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.4.0 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.4.0 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-37307 | github.com/cilium/cilium | HIGH | v1.13.2 | 1.13.17, 1.14.12, 1.15.6 | https://avd.aquasec.com/nvd/cve-2024-37307 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v24.0.2+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.2.0 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.5 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/configgrpc | HIGH | v0.80.0 | 0.102.1 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2024-36129 | go.opentelemetry.io/collector/config/confighttp | HIGH | v0.80.0 | 0.102.0 | https://avd.aquasec.com/nvd/cve-2024-36129 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.42.1-0.20230612162650-64be7e574a17 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.42.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.11.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.12.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.56.2 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24538 | stdlib | CRITICAL | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24538 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24534 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24534 |
| CVE-2023-24536 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24536 |
| CVE-2023-24537 | stdlib | HIGH | 1.19.7 | 1.19.8, 1.20.3 | https://avd.aquasec.com/nvd/cve-2023-24537 |
| CVE-2023-24539 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.19.7 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.19.7 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.7 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.4.0 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.10.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.11.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.11.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.4.0 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.10.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.11.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.11.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.11.1 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.4.0 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-spire-controller:2.4.0 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/spire-controller-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.10.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.11.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.11.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.4.0 (alpine 3.18.3)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.2-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.10.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.11.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.11.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.54.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.11.1 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2023-24540 | stdlib | CRITICAL | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24540 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.3 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-24539 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-24539 |
| CVE-2023-29400 | stdlib | HIGH | 1.20.3 | 1.19.9, 1.20.4 | https://avd.aquasec.com/nvd/cve-2023-29400 |
| CVE-2023-29403 | stdlib | HIGH | 1.20.3 | 1.19.10, 1.20.5 | https://avd.aquasec.com/nvd/cve-2023-29403 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.3 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.3 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.3 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.3 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Latest 2.3.x gloo mesh enterprise Release: 2.3.24
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.24 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.24 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.24 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.3.24 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.24 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.24 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.24 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.24 (alpine 3.18.8)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.21.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.23.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.4 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.23
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.23 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.23 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.23 (alpine 3.18.6)
gloo mesh enterprise gloo-otel-collector image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-otel-collector:2.3.23 (alpine 3.18.5)
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.20.7 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.20.7 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.20.7 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.20.7 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.20.7 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.23 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.23 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.23 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.23 (alpine 3.18.6)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.3+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.17.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.19.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.12.3 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.22.2 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2024-24788 | stdlib | HIGH | 1.22.2 | 1.22.3 | https://avd.aquasec.com/nvd/cve-2024-24788 |
| CVE-2024-34156 | stdlib | HIGH | 1.22.2 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.22
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.22 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.22 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.22 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.22 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.22 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.22 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.22 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.22 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.21
gloo mesh enterprise gloo-mesh-istiod-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.21 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.21 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.21 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.21 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.21 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.21 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.21 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.21 (alpine 3.18.4)
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.20
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.20 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.20 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.20 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.20 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.20 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.20 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.20 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.20 (alpine 3.18.4)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.3-r0 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.21.1 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.21.1 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.21.1 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45288 | stdlib | HIGH | 1.21.1 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.21.1 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.19
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.19 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.19 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.19 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.19 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.19 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.19 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.19 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.19 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.18
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.18 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.18 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.18 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.18 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.18 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.18 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.18 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.18 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.11-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.17
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.17 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.17 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.17 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.17 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.17 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.17 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.17 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.17 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.16
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.16 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.16 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.16 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.16 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.16 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.16 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.16 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.16 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.15
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.15 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.15 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.15 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.15 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.15 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.15 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.15 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.15 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.14
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.14 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.14 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.14 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.14 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.14 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.14 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.14 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.14 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.13
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.13 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.13 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.13 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.13 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.13 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.13 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-envoy image
No Vulnerabilities Found for gcr.io/gloo-mesh/gloo-mesh-envoy:2.3.13 (ubuntu 20.04)
gloo mesh enterprise gloo-mesh-spire-controller image
No scan found
gloo mesh enterprise gloo-mesh-insights image
No scan found
gloo mesh enterprise gloo-mesh-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-agent:2.3.13 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
Release 2.3.12
gloo mesh enterprise gloo-mesh-istiod-agent image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-istiod-agent:2.3.12 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/istiod-agent-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-apiserver image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-apiserver:2.3.12 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/apiserver-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 | https://avd.aquasec.com/nvd/cve-2024-28860 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v20.10.25+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2024-27289 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2 | https://avd.aquasec.com/nvd/cve-2024-27289 |
| CVE-2024-27304 | github.com/jackc/pgx | HIGH | v3.6.2+incompatible | 4.18.2, 5.5.4 | https://avd.aquasec.com/nvd/cve-2024-27304 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-26147 | helm.sh/helm/v3 | HIGH | v3.9.4 | 3.14.2 | https://avd.aquasec.com/nvd/cve-2024-26147 |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-ui image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-ui:2.3.12 (alpine 3.17.5)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
gloo mesh enterprise gloo-otel-collector image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-otel-collector:2.3.12 (alpine 3.18.0)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2022-48174 | busybox | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2022-48174 | busybox-binsh | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
| CVE-2023-5363 | libcrypto3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.1.0-r4 | 3.1.4-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2022-48174 | ssl_client | CRITICAL | 1.36.0-r9 | 1.36.1-r1 | https://avd.aquasec.com/nvd/cve-2022-48174 |
Vulnerabilities Listed for gloo-otel-collector
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-2253 | github.com/docker/distribution | HIGH | v2.8.1+incompatible | 2.8.2-beta.1 | https://avd.aquasec.com/nvd/cve-2023-2253 |
| CVE-2024-41110 | github.com/docker/docker | CRITICAL | v23.0.1+incompatible | 23.0.15, 26.1.5, 27.1.1, 25.0.6 | https://avd.aquasec.com/nvd/cve-2024-41110 |
| CVE-2023-28840 | github.com/docker/docker | HIGH | v23.0.1+incompatible | 20.10.24, 23.0.3 | https://avd.aquasec.com/nvd/cve-2023-28840 |
| GHSA-87m9-rv8p-rgmg | github.com/mostynb/go-grpc-compression | HIGH | v1.1.17 | 1.2.3 | https://github.com/advisories/GHSA-87m9-rv8p-rgmg |
| CVE-2023-27561 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.5 | https://avd.aquasec.com/nvd/cve-2023-27561 |
| CVE-2024-21626 | github.com/opencontainers/runc | HIGH | v1.1.4 | 1.1.12 | https://avd.aquasec.com/nvd/cve-2024-21626 |
| CVE-2023-34231 | github.com/snowflakedb/gosnowflake | HIGH | v1.6.18 | 1.6.19 | https://avd.aquasec.com/nvd/cve-2023-34231 |
| CVE-2023-47108 | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | HIGH | v0.40.0 | 0.46.0 | https://avd.aquasec.com/nvd/cve-2023-47108 |
| CVE-2023-45142 | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | HIGH | v0.40.0 | 0.44.0 | https://avd.aquasec.com/nvd/cve-2023-45142 |
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.6.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.53.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-portal-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-portal-server:2.3.12 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/portal-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-45337 | golang.org/x/crypto | CRITICAL | v0.5.0 | 0.31.0 | https://avd.aquasec.com/nvd/cve-2024-45337 |
| CVE-2023-39325 | golang.org/x/net | HIGH | v0.8.0 | 0.17.0 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2024-45338 | golang.org/x/net | HIGH | v0.8.0 | 0.33.0 | https://avd.aquasec.com/nvd/cve-2024-45338 |
| GHSA-m425-mq94-257g | google.golang.org/grpc | HIGH | v1.52.0 | 1.56.3, 1.57.1, 1.58.3 | https://github.com/advisories/GHSA-m425-mq94-257g |
| CVE-2024-24790 | stdlib | CRITICAL | 1.19.10 | 1.21.11, 1.22.4 | https://avd.aquasec.com/nvd/cve-2024-24790 |
| CVE-2023-39325 | stdlib | HIGH | 1.19.10 | 1.20.10, 1.21.3 | https://avd.aquasec.com/nvd/cve-2023-39325 |
| CVE-2023-45283 | stdlib | HIGH | 1.19.10 | 1.20.11, 1.21.4, 1.20.12, 1.21.5 | https://avd.aquasec.com/nvd/cve-2023-45283 |
| CVE-2023-45287 | stdlib | HIGH | 1.19.10 | 1.20.0 | https://avd.aquasec.com/nvd/cve-2023-45287 |
| CVE-2023-45288 | stdlib | HIGH | 1.19.10 | 1.21.9, 1.22.2 | https://avd.aquasec.com/nvd/cve-2023-45288 |
| CVE-2024-34156 | stdlib | HIGH | 1.19.10 | 1.22.7, 1.23.1 | https://avd.aquasec.com/nvd/cve-2024-34156 |
gloo mesh enterprise gloo-mesh-analyzer image
No scan found
gloo mesh enterprise gloo-mesh-mgmt-server image
Vulnerabilities Listed for gcr.io/gloo-mesh/gloo-mesh-mgmt-server:2.3.12 (alpine 3.17.1)
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2023-5363 | libcrypto3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
| CVE-2023-5363 | libssl3 | HIGH | 3.0.10-r0 | 3.0.12-r0 | https://avd.aquasec.com/nvd/cve-2023-5363 |
Vulnerabilities Listed for usr/local/bin/mgmt-server-linux-amd64
| Vulnerability ID | Package | Severity | Installed Version | Fixed Version | Reference |
|---|---|---|---|---|---|
| CVE-2024-28860 | github.com/cilium/cilium | HIGH | v1.12.10 | 1.13.14, 1.14.9, 1.15.3 |