| Key | Value |
|---|---|
| Timestamp | 2024-07-05T12:07:05+00:00 |
| Signature | unsigned |
| Tool |
Vendor: aquasecurity Name: trivy Version: 0.53.0 |
| Component |
bom-ref: pkg:oci/jenkins@sha256%3Af2e76ce1ba8d7b357f79a6f174b6696d3ede0cd9c323c5bd7347bf945807ac29?arch=amd64&repository_url=index.docker.io%2Fjenkins%2Fjenkins Type: container Name: jenkins/jenkins purl: pkg:oci/jenkins@sha256%3Af2e76ce1ba8d7b357f79a6f174b6696d3ede0cd9c323c5bd7347bf945807ac29?arch=amd64&repository_url=index.docker.io%2Fjenkins%2Fjenkins Properties:
|
# Summary Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1...
A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that s...
# Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications Spr...
# Pivotal Spring Framework contains unsafe Java deserialization methods Pivotal Spring Framework bef...
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. T...
libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string. Itcan ...
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked...
# Summary Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8...
When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed la...
# Path traversal in Jenkins Git Mercurial and Repo Plugins Jenkins SCMs support a number of differen...
** DISPUTED ** **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains tha...
# Summary A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function an...
** DISPUTED ** **DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains tha...
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external ...
# Jenkins Remoting library arbitrary file read vulnerability Jenkins uses the Remoting library (typi...
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | provided sbom is in a supported sbom format of spdx,cyclonedx | 10.0 |
|
| 2 | provided sbom should be in supported spec version for spec:1.6 and versions: 1.0,1.1,1.2,1.3,1.4,1.5,1.6 | 10.0 |
|
| 3 | provided sbom should be in supported file format for spec: json and version: json,xml | 10.0 |
|
| 4 | provided sbom is parsable | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | 150/312 have supplier names | 4.8 |
|
| 2 | 312/312 have names | 10.0 |
|
| 3 | 311/312 have versions | 10.0 |
|
| 4 | 312/312 have unique ID's | 10.0 |
|
| 5 | doc has 161 dependencies | 10.0 |
|
| 6 | doc has 1 authors | 10.0 |
|
| 7 | doc has creation timestamp 2024-07-05T12:07:05+00:00 | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | Doc Fields:true Pkg Fields:true | 10.0 |
|
| 2 | 143/312 have licenses | 4.6 |
|
| 3 | 0/312 have checksums | 0.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | 138/312 components with valid license | 3.3 |
|
| 2 | 312/312 components have primary purpose specified | 10.0 |
|
| 3 | 126/312 components have deprecated licenses | 6.0 |
|
| 4 | 0/312 components have restricted licenses | 10.0 |
|
| 5 | 311/312 components have any lookup id | 10.0 |
|
| 6 | 0/312 components have multiple lookup id | 0.0 |
|
| 7 | 1/1 tools have creator and version | 10.0 |
|
| 8 | primary component found | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | doc has a sharable license free 0 :: of 0 | 0.0 |
|