Comments (3)
ankane
commented on July 19, 2024
Hi @fernap3, can you share more details about the scan? Are you seeing the same with the latest tag?
from pghero.
hiddevdm
commented on July 19, 2024
I've also found another vulnerability in a scan: CVE-2023-36617. This seems to be the case for both v3.3.4 and the current latest
Installed Resource
uri 0.12.1
Full Path To Resource
/usr/local/lib/ruby/gems/3.1.0/specifications/default/uri-0.12.1.gemspec
Fixed Version
0.12.2
Recommendations
Upgrade package uri to version 0.12.2 or above.
from pghero.
ankane
commented on July 19, 2024
Updated the Docker image and uri gem in pghero/pghero@0382b81 (the uri gem may still show up on the scan since that version is bundled with Ruby, but it's not being used).
from pghero.
Related Issues (20)
- Error in SQL explain HOT 1
- Filter for user on queries tab
- [Idea] Show transaction duration on "Live Queries" page HOT 1
- [Idea] Allow sorting of tables on the Maintenance tab
- Issuing a new Release (e.g. v3.3.5) HOT 1
- Multi-architecture images for tags other than `latest` HOT 2
- pghero completed 500 internal error throwing plaintext password HOT 2
- GCP Cloud SQL System Stats not enable. HOT 1
- ArgumentError in `slow_queries` HOT 1
- Unable to show space graph on Azure Flexible Postgres Server if storage auto-growth is enabled HOT 1
- There are no graphs HOT 1
- Upgrading PGSQL Version HOT 3
- [Idea] Live queries parameters HOT 1
- Anonymize explain input
- Support for Debian12 HOT 2
- [Idea] Enable/Disable Option for "Kill" Button
- Unsolicited Email HOT 2
- `undefined method 'symbolize_keys'` when running on Rails' main branch HOT 2
- GCP stats not working anymore HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pghero.