Skip to main content
← PyPI

ciguard

3 known vulnerabilities (3 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 low
Registry
PyPI

Advisories 3

  • ciguard: SCA HTTP client reads response body without size cap

    Affected: from 0.6.0, fixed in 0.8.2.

  • ciguard: Container image runs as root (no USER directive)

    Affected: from 0.1.0, fixed in 0.8.2.

  • ciguard: discover_pipeline_files follows symlinks out of scan root

    Affected: from 0.8.0, fixed in 0.8.2.