{"id":23437838,"url":"https://github.com/onzack/trivy-multiscanner","last_synced_at":"2025-10-23T23:59:35.572Z","repository":{"id":191141735,"uuid":"387535543","full_name":"onzack/trivy-multiscanner","owner":"onzack","description":"Scan a list of container images using Aqua Security's trivy CLI tool","archived":false,"fork":false,"pushed_at":"2023-08-28T09:00:18.000Z","size":16,"stargazers_count":1,"open_issues_count":0,"forks_count":1,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-02-15T11:38:41.263Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/onzack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-07-19T16:54:50.000Z","updated_at":"2023-08-28T09:00:23.000Z","dependencies_parsed_at":null,"dependency_job_id":"9a1b41e4-b488-4d46-a6ff-5926a74dda70","html_url":"https://github.com/onzack/trivy-multiscanner","commit_stats":null,"previous_names":["onzack/trivy-multiscanner"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/onzack%2Ftrivy-multiscanner","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/onzack%2Ftrivy-multiscanner/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/onzack%2Ftrivy-multiscanner/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/onzack%2Ftrivy-multiscanner/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/onzack","download_url":"https://codeload.github.com/onzack/trivy-multiscanner/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248093905,"owners_count":21046762,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-12-23T14:38:26.148Z","updated_at":"2025-10-23T23:59:35.516Z","avatar_url":"https://github.com/onzack.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Trivy multiscanner\nScan a list of container images using Aqua Security's trivy CLI tool. See: https://github.com/aquasecurity/trivy\n\n# Quick guide\n## Prerequisites\n- Docker or an other supported container runtime\n- trivy CLI, see: https://aquasecurity.github.io/trivy/v0.19.1/getting-started/installation/\n\n## Installation\n1. Clone this repository to your local machine.\n2. Make the script executable: `chmod +x ./trivy-multiscanner/trivy-multiscanner.bash`\n3. Create a file with a list of container images. Example: example-images-list.txt:  \n   ```\n   ubuntu:20.04\n   quay.io/onzack/telegraf-swm:latest\n   ```\n4. Start the script and pass the path to the file with the list of container images:  \n   ```\n   ./trivy-multiscanner/trivy-multiscanner.bash ./trivy-multiscanner/example-images-list.txt\n   ```\n\n## Example output\n```\n  ______  __   _  _____      __     _____  _   __\n |  __  ||  \\ | ||___  /    /  \\   |  ___|| | / /\n | |  | || \\ \\| |   / /    / /\\ \\  | |    | |/ /\n | |__| || |\\ | |  / /__  / ____ \\ | |___ | |\\ \\\n |______||_| \\__| /_____|/_/    \\_\\|_____||_| \\_\\\n\nWelcome to ONZACK AG - www.onzack.com\nThis script scans a list of container images using Aqua Security's trivy CLI tool - https://github.com/aquasecurity/trivy\n\n######## List of images to scan:\nubuntu:20.04\nquay.io/onzack/telegraf-swm:latest\n\n######## Image: ubuntu:20.04\n----- Pull image -----\n20.04: Pulling from library/ubuntu\na31c7b29f4ad: Pull complete \nDigest: sha256:b3e2e47d016c08b3396b5ebe06ab0b711c34e7f37b98c9d37abe794b71cea0a2\nStatus: Downloaded newer image for ubuntu:20.04\ndocker.io/library/ubuntu:20.04\n\n----- Show age -----\nImage: ubuntu:20.04 was created 5 days ago\n\n----- Scan image -----\n2021-07-19T19:11:45.217+0200\tINFO\tDetecting Ubuntu vulnerabilities...\n2021-07-19T19:11:45.220+0200\tINFO\tTrivy skips scanning programming language libraries because no supported file was detected\n\nubuntu:20.04 (ubuntu 20.04)\n===========================\nTotal: 27 (UNKNOWN: 0, LOW: 27, MEDIUM: 0, HIGH: 0, CRITICAL: 0)\n\n+-------------+------------------+----------+------------------------+---------------+-----------------------------------------+\n|   LIBRARY   | VULNERABILITY ID | SEVERITY |   INSTALLED VERSION    | FIXED VERSION |                  TITLE                  |\n+-------------+------------------+----------+------------------------+---------------+-----------------------------------------+\n| bash        | CVE-2019-18276   | LOW      | 5.0-6ubuntu1.1         |               | bash: when effective UID is not         |\n|             |                  |          |                        |               | equal to its real UID the...            |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2019-18276   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| coreutils   | CVE-2016-2781    |          | 8.30-3ubuntu2          |               | coreutils: Non-privileged               |\n|             |                  |          |                        |               | session can escape to the               |\n|             |                  |          |                        |               | parent session in chroot                |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2016-2781    |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libc-bin    | CVE-2016-10228   |          | 2.31-0ubuntu9.2        |               | glibc: iconv program can hang           |\n|             |                  |          |                        |               | when invoked with the -c option         |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2016-10228   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2019-25013   |          |                        |               | glibc: buffer over-read in              |\n|             |                  |          |                        |               | iconv when processing invalid           |\n|             |                  |          |                        |               | multi-byte input sequences in...        |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2019-25013   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-27618   |          |                        |               | glibc: iconv when processing            |\n|             |                  |          |                        |               | invalid multi-byte input                |\n|             |                  |          |                        |               | sequences fails to advance the...       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-27618   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-29562   |          |                        |               | glibc: assertion failure in iconv       |\n|             |                  |          |                        |               | when converting invalid UCS4            |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-29562   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-6096    |          |                        |               | glibc: signed comparison                |\n|             |                  |          |                        |               | vulnerability in the                    |\n|             |                  |          |                        |               | ARMv7 memcpy function                   |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-6096    |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2021-27645   |          |                        |               | glibc: Use-after-free in                |\n|             |                  |          |                        |               | addgetnetgrentX function                |\n|             |                  |          |                        |               | in netgroupcache.c                      |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-27645   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2021-3326    |          |                        |               | glibc: Assertion failure in             |\n|             |                  |          |                        |               | ISO-2022-JP-3 gconv module              |\n|             |                  |          |                        |               | related to combining characters         |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-3326    |\n+-------------+------------------+          +                        +---------------+-----------------------------------------+\n| libc6       | CVE-2016-10228   |          |                        |               | glibc: iconv program can hang           |\n|             |                  |          |                        |               | when invoked with the -c option         |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2016-10228   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2019-25013   |          |                        |               | glibc: buffer over-read in              |\n|             |                  |          |                        |               | iconv when processing invalid           |\n|             |                  |          |                        |               | multi-byte input sequences in...        |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2019-25013   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-27618   |          |                        |               | glibc: iconv when processing            |\n|             |                  |          |                        |               | invalid multi-byte input                |\n|             |                  |          |                        |               | sequences fails to advance the...       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-27618   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-29562   |          |                        |               | glibc: assertion failure in iconv       |\n|             |                  |          |                        |               | when converting invalid UCS4            |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-29562   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-6096    |          |                        |               | glibc: signed comparison                |\n|             |                  |          |                        |               | vulnerability in the                    |\n|             |                  |          |                        |               | ARMv7 memcpy function                   |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-6096    |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2021-27645   |          |                        |               | glibc: Use-after-free in                |\n|             |                  |          |                        |               | addgetnetgrentX function                |\n|             |                  |          |                        |               | in netgroupcache.c                      |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-27645   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2021-3326    |          |                        |               | glibc: Assertion failure in             |\n|             |                  |          |                        |               | ISO-2022-JP-3 gconv module              |\n|             |                  |          |                        |               | related to combining characters         |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-3326    |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libgcrypt20 | CVE-2021-33560   |          | 1.8.5-5ubuntu1         |               | libgcrypt: mishandles ElGamal           |\n|             |                  |          |                        |               | encryption because it lacks             |\n|             |                  |          |                        |               | exponent blinding to address a...       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-33560   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libgnutls30 | CVE-2021-20231   |          | 3.6.13-2ubuntu1.3      |               | gnutls: Use after free in               |\n|             |                  |          |                        |               | client key_share extension              |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-20231   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2021-20232   |          |                        |               | gnutls: Use after free                  |\n|             |                  |          |                        |               | in client_send_params in                |\n|             |                  |          |                        |               | lib/ext/pre_shared_key.c                |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-20232   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libpcre3    | CVE-2017-11164   |          | 2:8.39-12build1        |               | pcre: OP_KETRMAX feature in the         |\n|             |                  |          |                        |               | match function in pcre_exec.c           |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2017-11164   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2019-20838   |          |                        |               | pcre: buffer over-read in               |\n|             |                  |          |                        |               | JIT when UTF is disabled                |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2019-20838   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-14155   |          |                        |               | pcre: integer overflow in libpcre       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-14155   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libsystemd0 | CVE-2020-13529   |          | 245.4-4ubuntu3.7       |               | systemd: DHCP FORCERENEW                |\n|             |                  |          |                        |               | authentication not implemented          |\n|             |                  |          |                        |               | can cause a system running the...       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-13529   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libtasn1-6  | CVE-2018-1000654 |          | 4.16.0-2               |               | libtasn1: Infinite loop in              |\n|             |                  |          |                        |               | _asn1_expand_object_id(ptree)           |\n|             |                  |          |                        |               | leads to memory exhaustion              |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2018-1000654 |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libudev1    | CVE-2020-13529   |          | 245.4-4ubuntu3.7       |               | systemd: DHCP FORCERENEW                |\n|             |                  |          |                        |               | authentication not implemented          |\n|             |                  |          |                        |               | can cause a system running the...       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-13529   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| login       | CVE-2013-4235    |          | 1:4.8.1-1ubuntu5.20.04 |               | shadow-utils: TOCTOU race               |\n|             |                  |          |                        |               | conditions by copying and               |\n|             |                  |          |                        |               | removing directory trees                |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2013-4235    |\n+-------------+                  +          +                        +---------------+                                         +\n| passwd      |                  |          |                        |               |                                         |\n|             |                  |          |                        |               |                                         |\n|             |                  |          |                        |               |                                         |\n|             |                  |          |                        |               |                                         |\n+-------------+------------------+----------+------------------------+---------------+-----------------------------------------+\n\n######## Image: quay.io/onzack/telegraf-swm:latest\n----- Pull image -----\nlatest: Pulling from onzack/telegraf-swm\nc549ccf8d472: Pull complete \n918d78e87d43: Pull complete \nc3b3c2333fc1: Pull complete \nead8b4f7177c: Pull complete \nDigest: sha256:c8fa16443300ba2e1df334b0fced2e745eeb4e18e16996af2e77d1a856a749c5\nStatus: Downloaded newer image for quay.io/onzack/telegraf-swm:latest\nquay.io/onzack/telegraf-swm:latest\n\n----- Show age -----\nImage: quay.io/onzack/telegraf-swm:latest was created 12 days ago\n\n----- Scan image -----\n2021-07-19T19:11:58.246+0200\tWARN\tYou should avoid using the :latest tag as it is cached. You need to specify '--clear-cache' option when :latest image is changed\n2021-07-19T19:12:01.143+0200\tINFO\tDetecting Ubuntu vulnerabilities...\n2021-07-19T19:12:01.184+0200\tINFO\tTrivy skips scanning programming language libraries because no supported file was detected\n\nquay.io/onzack/telegraf-swm:latest (ubuntu 20.04)\n=================================================\nTotal: 27 (UNKNOWN: 0, LOW: 27, MEDIUM: 0, HIGH: 0, CRITICAL: 0)\n\n+-------------+------------------+----------+------------------------+---------------+-----------------------------------------+\n|   LIBRARY   | VULNERABILITY ID | SEVERITY |   INSTALLED VERSION    | FIXED VERSION |                  TITLE                  |\n+-------------+------------------+----------+------------------------+---------------+-----------------------------------------+\n| bash        | CVE-2019-18276   | LOW      | 5.0-6ubuntu1.1         |               | bash: when effective UID is not         |\n|             |                  |          |                        |               | equal to its real UID the...            |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2019-18276   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| coreutils   | CVE-2016-2781    |          | 8.30-3ubuntu2          |               | coreutils: Non-privileged               |\n|             |                  |          |                        |               | session can escape to the               |\n|             |                  |          |                        |               | parent session in chroot                |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2016-2781    |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libc-bin    | CVE-2016-10228   |          | 2.31-0ubuntu9.2        |               | glibc: iconv program can hang           |\n|             |                  |          |                        |               | when invoked with the -c option         |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2016-10228   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2019-25013   |          |                        |               | glibc: buffer over-read in              |\n|             |                  |          |                        |               | iconv when processing invalid           |\n|             |                  |          |                        |               | multi-byte input sequences in...        |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2019-25013   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-27618   |          |                        |               | glibc: iconv when processing            |\n|             |                  |          |                        |               | invalid multi-byte input                |\n|             |                  |          |                        |               | sequences fails to advance the...       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-27618   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-29562   |          |                        |               | glibc: assertion failure in iconv       |\n|             |                  |          |                        |               | when converting invalid UCS4            |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-29562   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-6096    |          |                        |               | glibc: signed comparison                |\n|             |                  |          |                        |               | vulnerability in the                    |\n|             |                  |          |                        |               | ARMv7 memcpy function                   |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-6096    |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2021-27645   |          |                        |               | glibc: Use-after-free in                |\n|             |                  |          |                        |               | addgetnetgrentX function                |\n|             |                  |          |                        |               | in netgroupcache.c                      |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-27645   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2021-3326    |          |                        |               | glibc: Assertion failure in             |\n|             |                  |          |                        |               | ISO-2022-JP-3 gconv module              |\n|             |                  |          |                        |               | related to combining characters         |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-3326    |\n+-------------+------------------+          +                        +---------------+-----------------------------------------+\n| libc6       | CVE-2016-10228   |          |                        |               | glibc: iconv program can hang           |\n|             |                  |          |                        |               | when invoked with the -c option         |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2016-10228   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2019-25013   |          |                        |               | glibc: buffer over-read in              |\n|             |                  |          |                        |               | iconv when processing invalid           |\n|             |                  |          |                        |               | multi-byte input sequences in...        |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2019-25013   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-27618   |          |                        |               | glibc: iconv when processing            |\n|             |                  |          |                        |               | invalid multi-byte input                |\n|             |                  |          |                        |               | sequences fails to advance the...       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-27618   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-29562   |          |                        |               | glibc: assertion failure in iconv       |\n|             |                  |          |                        |               | when converting invalid UCS4            |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-29562   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-6096    |          |                        |               | glibc: signed comparison                |\n|             |                  |          |                        |               | vulnerability in the                    |\n|             |                  |          |                        |               | ARMv7 memcpy function                   |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-6096    |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2021-27645   |          |                        |               | glibc: Use-after-free in                |\n|             |                  |          |                        |               | addgetnetgrentX function                |\n|             |                  |          |                        |               | in netgroupcache.c                      |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-27645   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2021-3326    |          |                        |               | glibc: Assertion failure in             |\n|             |                  |          |                        |               | ISO-2022-JP-3 gconv module              |\n|             |                  |          |                        |               | related to combining characters         |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-3326    |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libgcrypt20 | CVE-2021-33560   |          | 1.8.5-5ubuntu1         |               | libgcrypt: mishandles ElGamal           |\n|             |                  |          |                        |               | encryption because it lacks             |\n|             |                  |          |                        |               | exponent blinding to address a...       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-33560   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libgnutls30 | CVE-2021-20231   |          | 3.6.13-2ubuntu1.3      |               | gnutls: Use after free in               |\n|             |                  |          |                        |               | client key_share extension              |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-20231   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2021-20232   |          |                        |               | gnutls: Use after free                  |\n|             |                  |          |                        |               | in client_send_params in                |\n|             |                  |          |                        |               | lib/ext/pre_shared_key.c                |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2021-20232   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libpcre3    | CVE-2017-11164   |          | 2:8.39-12build1        |               | pcre: OP_KETRMAX feature in the         |\n|             |                  |          |                        |               | match function in pcre_exec.c           |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2017-11164   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2019-20838   |          |                        |               | pcre: buffer over-read in               |\n|             |                  |          |                        |               | JIT when UTF is disabled                |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2019-20838   |\n+             +------------------+          +                        +---------------+-----------------------------------------+\n|             | CVE-2020-14155   |          |                        |               | pcre: integer overflow in libpcre       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-14155   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libsystemd0 | CVE-2020-13529   |          | 245.4-4ubuntu3.7       |               | systemd: DHCP FORCERENEW                |\n|             |                  |          |                        |               | authentication not implemented          |\n|             |                  |          |                        |               | can cause a system running the...       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-13529   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libtasn1-6  | CVE-2018-1000654 |          | 4.16.0-2               |               | libtasn1: Infinite loop in              |\n|             |                  |          |                        |               | _asn1_expand_object_id(ptree)           |\n|             |                  |          |                        |               | leads to memory exhaustion              |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2018-1000654 |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| libudev1    | CVE-2020-13529   |          | 245.4-4ubuntu3.7       |               | systemd: DHCP FORCERENEW                |\n|             |                  |          |                        |               | authentication not implemented          |\n|             |                  |          |                        |               | can cause a system running the...       |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2020-13529   |\n+-------------+------------------+          +------------------------+---------------+-----------------------------------------+\n| login       | CVE-2013-4235    |          | 1:4.8.1-1ubuntu5.20.04 |               | shadow-utils: TOCTOU race               |\n|             |                  |          |                        |               | conditions by copying and               |\n|             |                  |          |                        |               | removing directory trees                |\n|             |                  |          |                        |               | --\u003eavd.aquasec.com/nvd/cve-2013-4235    |\n+-------------+                  +          +                        +---------------+                                         +\n| passwd      |                  |          |                        |               |                                         |\n|             |                  |          |                        |               |                                         |\n|             |                  |          |                        |               |                                         |\n|             |                  |          |                        |               |                                         |\n+-------------+------------------+----------+------------------------+---------------+-----------------------------------------+\n```\n\n# Licence\nCopyright 2021 ONZACK AG - www.onzack.com\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fonzack%2Ftrivy-multiscanner","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fonzack%2Ftrivy-multiscanner","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fonzack%2Ftrivy-multiscanner/lists"}