quay/claircore

quay/claircore

GitHubGitHub
GitHubgithub.com
quay.github.ioquay.github.io
Releases175
Frequency1 week 6 days
Last Release
Stars151
foundation modules for scanning container packages and reporting vulnerabilities
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2021-3762↗
9.8 CRITICAL7.5 HIGH

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.