quay/clair

quay/clair

GitHubGitHub
GitHubgithub.com
quay.github.ioquay.github.io
Releases137
Frequency3 weeks 6 days
Last Release
Stars11K
Vulnerability Static Analysis for Containers
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-3762↗
9.8 CRITICAL7.5 HIGH

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.