GO-2024-3005 | Vulnetix

GO-2024-3005 PUBLISHED

Record from OSV · Published July 29, 2024

Moby authz zero length regression in github.com/moby/moby

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
trivy	Wolfi	0.54.0-r0
falcoctl-fips-0.4	Chainguard	0.4.0-r12
neuvector-sigstore-interface	Wolfi	0_git20240801-r0
cosign	Chainguard	2.3.0-r1
cert-manager-cmctl	Chainguard	2.1.0-r3
buf	Wolfi	1.35.1-r1
neuvector-scanner-fips	Chainguard	0_git20240528-r3
timoni	Wolfi	0.22.0-r2
kubeflow-katib	Chainguard	0.17.0-r13
trivy-fips	Chainguard	0.54.0-r0
helm-operator	Chainguard	1.36.0-r1
guac	Chainguard	0.8.0-r1

88 more packages have a fixed version. See every fix in Lookup.

Vendor	Product	Versions
wolfi	trivy	0
chainguard	falcoctl-fips-0.4	0
chainguard	crane	*
wolfi	neuvector-sigstore-interface	0
chainguard	cosign	0
chainguard	cert-manager-cmctl	0
wolfi	buf	0
chainguard	neuvector-scanner-fips	0
wolfi	timoni	0
chainguard	kubevela-fips	*
chainguard	rancher-agent-2.9	*
chainguard	kubeflow-katib	0
chainguard	trivy-fips	0
chainguard	helm-operator	0
chainguard	guac	0
chainguard	nerdctl	0
chainguard	dive	0
wolfi	k3d	0
wolfi	ko	0
chainguard	policy-controller-fips	0

…and 186 more

The same record, from the CLI:

vulnetix vdb vuln GO-2024-3005
vulnetix vdb fixes GO-2024-3005

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GO-2024-3005/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart