quay/clair

quay/clair

GitHubGitHub
GitHubgithub.com
quay.github.ioquay.github.io
Releases137
Frequency3 weeks 6 days
Last Release
Stars11K
Vulnerability Static Analysis for Containers
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2021-3762NVD↗
>= 0.4.6, < 0.4.8, >= 0.5.3, < 0.5.59.8 CRITICAL7.5 HIGH

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.