Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

x/vulndb: potential Go vuln in github.com/docker/docker: GHSA-jq35-85cj-fj4p #2161

Closed
GoVulnBot opened this issue Oct 30, 2023 · 1 comment
Assignees
Labels
excluded: NOT_IMPORTABLE This vulnerability only exists in a binary and is not importable.

Comments

@GoVulnBot
Copy link

In GitHub Security Advisory GHSA-jq35-85cj-fj4p, there is a vulnerability in the following Go packages or modules:

Unit Fixed Vulnerable Ranges
github.com/docker/docker 24.0.7 < 24.0.7

Cross references:

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: github.com/docker/docker
      versions:
        - fixed: 24.0.7
      packages:
        - package: github.com/docker/docker
summary: /sys/devices/virtual/powercap accessible by default to containers
ghsas:
    - GHSA-jq35-85cj-fj4p
references:
    - advisory: https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p
    - advisory: https://github.com/advisories/GHSA-jq35-85cj-fj4p

@neild neild self-assigned this Nov 2, 2023
@neild neild added the excluded: NOT_IMPORTABLE This vulnerability only exists in a binary and is not importable. label Nov 2, 2023
@gopherbot
Copy link
Contributor

Change https://go.dev/cl/539339 mentions this issue: data/excluded: batch add 7 excluded reports

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
excluded: NOT_IMPORTABLE This vulnerability only exists in a binary and is not importable.
Projects
None yet
Development

No branches or pull requests

3 participants