quay/claircore

quay/claircore

GitHubGitHub
GitHubgithub.com
quay.github.ioquay.github.io
Releases177
Frequency2 weeks 2 hours
Last Release
Stars152
foundation modules for scanning container packages and reporting vulnerabilities
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2021-3762NVD↗
—9.8 CRITICAL7.5 HIGH

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.