Known CVEs found

Incident Report for Fairwinds

Update

We are continuing to work on a fix for this issue.

Posted Nov 30, 2022 - 12:20 EST

Identified

The issue has been identified and a fix is being implemented.

Posted Nov 29, 2022 - 16:32 EST

Monitoring

A fix has been implemented and we are monitoring the results.

Posted Nov 29, 2022 - 16:32 EST

Investigating

We've identified the following CVEs. We are waiting for upstream projects to release fixes.

quay.io/fairwinds/aws-costs:1.1.2
* 2 CVEs in aws-cli:2.9.22 (waiting for fix)

quay.io/fairwinds/insights-ci:3.2.0
* 4 CVEs in tfsec 1.28.1 (waiting for fix)
* 2 CVEs in trivy 0.37.1 (waiting for fix)

quay.io/fairwinds/fw-trivy:0.24.0
* 2 CVEs in trivy 0.37.1 (waiting for fix)

Posted Nov 29, 2022 - 16:30 EST

This incident affects: Insights Agent Vulnerabilities.