| Key | Value |
|---|---|
| Timestamp | 2024-07-05T12:07:05+00:00 |
| Signature | unsigned |
| Tool |
Vendor: aquasecurity Name: trivy Version: 0.53.0 |
| Component |
bom-ref: pkg:oci/jenkins@sha256%3Af2e76ce1ba8d7b357f79a6f174b6696d3ede0cd9c323c5bd7347bf945807ac29?arch=amd64&repository_url=index.docker.io%2Fjenkins%2Fjenkins Type: container Name: jenkins/jenkins purl: pkg:oci/jenkins@sha256%3Af2e76ce1ba8d7b357f79a6f174b6696d3ede0cd9c323c5bd7347bf945807ac29?arch=amd64&repository_url=index.docker.io%2Fjenkins%2Fjenkins Properties:
|
# Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications Spr...
# Pivotal Spring Framework contains unsafe Java deserialization methods Pivotal Spring Framework bef...
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a ...
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. T...
A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that s...
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, ...
A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large...
libcurl's ASN1 parser has this utf8asn1str() function used for parsing an ASN.1 UTF-8 string. Itcan ...
# Summary HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN,...
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external ...
# Spring Security Does Not Enforce Password Length BCryptPasswordEncoder.matches(CharSequence,String...
...
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequence...
wall in util-linux through 2.40, often installed with setgid tty permissions, allows escape sequence...
# Jenkins Remoting library arbitrary file read vulnerability Jenkins uses the Remoting library (typi...
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | provided sbom is in a supported sbom format of spdx,cyclonedx | 10.0 |
|
| 2 | provided sbom should be in supported spec version for spec:1.6 and versions: 1.0,1.1,1.2,1.3,1.4,1.5,1.6 | 10.0 |
|
| 3 | provided sbom should be in supported file format for spec: json and version: json,xml | 10.0 |
|
| 4 | provided sbom is parsable | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | 150/312 have supplier names | 4.8 |
|
| 2 | 312/312 have names | 10.0 |
|
| 3 | 311/312 have versions | 10.0 |
|
| 4 | 312/312 have unique ID's | 10.0 |
|
| 5 | doc has 161 dependencies | 10.0 |
|
| 6 | doc has 1 authors | 10.0 |
|
| 7 | doc has creation timestamp 2024-07-05T12:07:05+00:00 | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | Doc Fields:true Pkg Fields:true | 10.0 |
|
| 2 | 143/312 have licenses | 4.6 |
|
| 3 | 0/312 have checksums | 0.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | 138/312 components with valid license | 3.3 |
|
| 2 | 312/312 components have primary purpose specified | 10.0 |
|
| 3 | 126/312 components have deprecated licenses | 6.0 |
|
| 4 | 0/312 components have restricted licenses | 10.0 |
|
| 5 | 311/312 components have any lookup id | 10.0 |
|
| 6 | 0/312 components have multiple lookup id | 0.0 |
|
| 7 | 1/1 tools have creator and version | 10.0 |
|
| 8 | primary component found | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | doc has a sharable license free 0 :: of 0 | 0.0 |
|