The probability is the direct output of the EPSS model, and conveys an overall sense of the threat of exploitation in the wild. The percentile measures the EPSS probability relative to all known EPSS scores. Note: This data is updated daily, relying on the latest available EPSS model version. Check out the EPSS documentation for more details.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsUpgrade Debian:11
docker.io
to version 20.10.5+dfsg1-1+deb11u1 or higher.
Note: Versions mentioned in the description apply only to the upstream docker.io
package and not the docker.io
package as distributed by Debian
.
See How to fix?
for Debian:11
relevant fixed versions and status.
Docker CLI is the command line interface for the docker container runtime. A bug was found in the Docker CLI where running docker login my-private-registry.example.com
with a misconfigured configuration file (typically ~/.docker/config.json
) listing a credsStore
or credHelpers
that could not be executed would result in any provided credentials being sent to registry-1.docker.io
rather than the intended private registry. This bug has been fixed in Docker CLI 20.10.9. Users should update to this version as soon as possible. For users unable to update ensure that any configured credsStore or credHelpers entries in the configuration file reference an installed credential helper that is executable and on the PATH.