Skip to content

Update README.md - #41

Closed
JFWenisch wants to merge 1 commit into
mainfrom
hotfix/deps2
Closed

JFWenisch wants to merge 1 commit into
mainfrom
hotfix/deps2

Conversation

@JFWenisch

Copy link
Copy Markdown
Member

No description provided.

@github-actions

Copy link
Copy Markdown
Contributor

Trivy vulnerability report

Image: ghcr.io/wenisch-tech/s3webui:1.2.2-pr.41.318


Report Summary

┌───────────────────────────────────────────────────────────────┬───────┬─────────────────┐
│                            Target                             │ Type  │ Vulnerabilities │
├───────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ ghcr.io/wenisch-tech/s3webui:1.2.2-pr.41.318 (wolfi 20230201) │ wolfi │        1        │
├───────────────────────────────────────────────────────────────┼───────┼─────────────────┤
│ app/app.jar                                                   │  jar  │        0        │
└───────────────────────────────────────────────────────────────┴───────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.74/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


ghcr.io/wenisch-tech/s3webui:1.2.2-pr.41.318 (wolfi 20230201)
=============================================================
Total: 1 (MEDIUM: 1, HIGH: 0, CRITICAL: 0)

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                           │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ zlib    │ CVE-2026-85091 │ MEDIUM   │ fixed  │ 1.3.2-r6          │ 1.3.3-r0      │ zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer │
│         │                │          │        │                   │               │ overflow vul ......                                       │
│         │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-85091                │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘

@JFWenisch JFWenisch closed this Sep 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant