chore(findings): big-bang/compliance-dashboard-collector
Summary
big-bang/compliance-dashboard-collector has 172 new findings discovered during continuous monitoring.
More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=big-bang/compliance-dashboard-collector&tag=0.0.4&branch=master
EPSS (Exploit Prediction Scoring System) provides an estimate of the likelihood that a vulnerability will be exploited in the wild.
KEV (Known Exploited Vulnerabilities) indicates whether a vulnerability is actively being exploited according to CISA.
| id | source | severity | package | impact | workaround | epss_score | kev |
|---|---|---|---|---|---|---|---|
| CVE-2024-1931 | Twistlock CVE | Medium | unbound-1.16.2-19.el9_6.1 | 0.06753 | false | ||
| CVE-2024-1931 | Anchore CVE | Medium | unbound-libs-1.16.2-19.el9_6.1 | 0.06753 | false | ||
| CVE-2024-7264 | Twistlock CVE | Low | curl-7.76.1-31.el9_6.1 | 0.06460 | false | ||
| CVE-2024-7264 | Anchore CVE | Low | curl-minimal-7.76.1-31.el9_6.1 | 0.06460 | false | ||
| CVE-2024-7264 | Anchore CVE | Low | libcurl-minimal-7.76.1-31.el9_6.1 | 0.06460 | false | ||
| CVE-2024-33655 | Twistlock CVE | Low | unbound-1.16.2-19.el9_6.1 | 0.03995 | false | ||
| CVE-2024-33655 | Anchore CVE | Low | unbound-libs-1.16.2-19.el9_6.1 | 0.03995 | false | ||
| CVE-2024-56433 | Anchore CVE | Low | shadow-utils-2:4.9-12.el9 | 0.03604 | false | ||
| CVE-2024-9681 | Twistlock CVE | Low | curl-7.76.1-31.el9_6.1 | 0.00571 | false | ||
| CVE-2024-9681 | Anchore CVE | Low | libcurl-minimal-7.76.1-31.el9_6.1 | 0.00571 | false | ||
| CVE-2024-9681 | Anchore CVE | Low | curl-minimal-7.76.1-31.el9_6.1 | 0.00571 | false | ||
| CVE-2024-41996 | Anchore CVE | Low | openssl-libs-1:3.2.2-6.el9_5.1 | 0.00446 | false | ||
| CVE-2024-41996 | Twistlock CVE | Low | openssl-1:3.2.2-6.el9_5.1 | 0.00446 | false | ||
| CVE-2024-34459 | Twistlock CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00390 | false | ||
| CVE-2024-34459 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00390 | false | ||
| CVE-2024-11053 | Twistlock CVE | Low | curl-7.76.1-31.el9_6.1 | 0.00337 | false | ||
| CVE-2024-11053 | Anchore CVE | Low | curl-minimal-7.76.1-31.el9_6.1 | 0.00337 | false | ||
| CVE-2024-11053 | Anchore CVE | Low | libcurl-minimal-7.76.1-31.el9_6.1 | 0.00337 | false | ||
| CVE-2021-3572 | Twistlock CVE | Low | python-pip-21.3.1-1.el9 | 0.00240 | false | ||
| CVE-2021-3572 | Anchore CVE | Low | python3-pip-wheel-21.3.1-1.el9 | 0.00240 | false | ||
| CVE-2025-1795 | Twistlock CVE | Low | python3.9-3.9.21-2.el9_6.1 | 0.00236 | false | ||
| CVE-2025-1795 | Anchore CVE | Low | python3-libs-3.9.21-2.el9_6.1 | 0.00236 | false | ||
| CVE-2025-1795 | Anchore CVE | Low | python-unversioned-command-3.9.21-2.el9_6.1 | 0.00236 | false | ||
| CVE-2025-1795 | Anchore CVE | Low | python3-3.9.21-2.el9_6.1 | 0.00236 | false | ||
| CVE-2025-8194 | Twistlock CVE | Medium | python3.9-3.9.21-2.el9_6.1 | 0.00207 | false | ||
| CVE-2025-8194 | Anchore CVE | Medium | python-unversioned-command-3.9.21-2.el9_6.1 | 0.00207 | false | ||
| CVE-2025-8194 | Anchore CVE | Medium | python3-libs-3.9.21-2.el9_6.1 | 0.00207 | false | ||
| CVE-2025-8194 | Anchore CVE | Medium | python3-3.9.21-2.el9_6.1 | 0.00207 | false | ||
| CVE-2023-32636 | Twistlock CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00165 | false | ||
| CVE-2023-32636 | Anchore CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00165 | false | ||
| CVE-2025-1632 | Twistlock CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00156 | false | ||
| CVE-2025-1632 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00156 | false | ||
| CVE-2024-13176 | Anchore CVE | Low | openssl-libs-1:3.2.2-6.el9_5.1 | 0.00118 | false | ||
| CVE-2024-13176 | Twistlock CVE | Low | openssl-1:3.2.2-6.el9_5.1 | 0.00118 | false | ||
| CVE-2025-6069 | Twistlock CVE | Medium | python3.9-3.9.21-2.el9_6.1 | 0.00116 | false | ||
| CVE-2025-6069 | Anchore CVE | Medium | python3-libs-3.9.21-2.el9_6.1 | 0.00116 | false | ||
| CVE-2025-6069 | Anchore CVE | Medium | python-unversioned-command-3.9.21-2.el9_6.1 | 0.00116 | false | ||
| CVE-2025-6069 | Anchore CVE | Medium | python3-3.9.21-2.el9_6.1 | 0.00116 | false | ||
| CVE-2025-32990 | Twistlock CVE | Medium | gnutls-3.8.3-6.el9 | 0.00101 | false | ||
| CVE-2025-32990 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00101 | false | ||
| CVE-2025-32990 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00101 | false | ||
| CVE-2025-32990 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00101 | false | ||
| CVE-2025-32988 | Twistlock CVE | Medium | gnutls-3.8.3-6.el9 | 0.00096 | false | ||
| CVE-2025-32988 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00096 | false | ||
| CVE-2025-32988 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00096 | false | ||
| CVE-2025-32988 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00096 | false | ||
| CVE-2025-7039 | Twistlock CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00089 | false | ||
| CVE-2025-6395 | Twistlock CVE | Medium | gnutls-3.8.3-6.el9 | 0.00080 | false | ||
| CVE-2025-6395 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00080 | false | ||
| CVE-2025-6395 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00080 | false | ||
| CVE-2025-6395 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00080 | false | ||
| CVE-2025-9086 | Twistlock CVE | Medium | curl-7.76.1-31.el9_6.1 | 0.00077 | false | ||
| CVE-2025-9086 | Anchore CVE | Medium | libcurl-minimal-7.76.1-31.el9_6.1 | 0.00077 | false | ||
| CVE-2025-9086 | Anchore CVE | Medium | curl-minimal-7.76.1-31.el9_6.1 | 0.00077 | false | ||
| CVE-2023-45322 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00076 | false | ||
| CVE-2025-59375 | Twistlock CVE | High | expat-2.5.0-5.el9_6 | 0.00075 | false | ||
| CVE-2025-59375 | Anchore CVE | High | expat-2.5.0-5.el9_6 | 0.00075 | false | ||
| CVE-2025-8291 | Anchore CVE | Medium | python3-libs-3.9.21-2.el9_6.1 | 0.00073 | false | ||
| CVE-2025-8291 | Anchore CVE | Medium | python3-3.9.21-2.el9_6.1 | 0.00073 | false | ||
| CVE-2025-8291 | Anchore CVE | Medium | python-unversioned-command-3.9.21-2.el9_6.1 | 0.00073 | false | ||
| CVE-2025-8291 | Twistlock CVE | Medium | python3.9-3.9.21-2.el9_6.1 | 0.00073 | false | ||
| CVE-2023-39804 | Anchore CVE | Low | tar-2:1.34-7.el9 | 0.00067 | false | ||
| CVE-2023-39804 | Twistlock CVE | Low | tar-2:1.34-7.el9 | 0.00067 | false | ||
| CVE-2025-3360 | Twistlock CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00061 | false | ||
| CVE-2025-3360 | Anchore CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00061 | false | ||
| CVE-2022-41409 | Twistlock CVE | Low | pcre2-10.40-6.el9 | 0.00061 | false | ||
| CVE-2022-41409 | Anchore CVE | Low | pcre2-10.40-6.el9 | 0.00061 | false | ||
| CVE-2022-41409 | Anchore CVE | Low | pcre2-syntax-10.40-6.el9 | 0.00061 | false | ||
| CVE-2025-27113 | Twistlock CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00059 | false | ||
| CVE-2025-27113 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00059 | false | ||
| CVE-2024-43168 | Twistlock CVE | Low | unbound-1.16.2-19.el9_6.1 | 0.00057 | false | ||
| CVE-2024-43168 | Anchore CVE | Low | unbound-libs-1.16.2-19.el9_6.1 | 0.00057 | false | ||
| CVE-2022-33070 | Twistlock CVE | Low | protobuf-c-1.3.3-13.el9 | 0.00056 | false | ||
| CVE-2022-33070 | Anchore CVE | Low | protobuf-c-1.3.3-13.el9 | 0.00056 | false | ||
| CVE-2025-4598 | Twistlock CVE | Medium | systemd-252-51.el9_6.1 | 0.00053 | false | ||
| CVE-2025-4598 | Anchore CVE | Medium | systemd-libs-252-51.el9_6.1 | 0.00053 | false | ||
| CVE-2023-50495 | Twistlock CVE | Low | ncurses-6.2-10.20210508.el9_6.2 | 0.00050 | false | ||
| CVE-2023-50495 | Anchore CVE | Low | ncurses-base-6.2-10.20210508.el9_6.2 | 0.00050 | false | ||
| CVE-2023-50495 | Anchore CVE | Low | ncurses-libs-6.2-10.20210508.el9_6.2 | 0.00050 | false | ||
| CVE-2022-27943 | Twistlock CVE | Low | gcc-11.5.0-5.el9_5 | 0.00050 | false | ||
| CVE-2022-27943 | Anchore CVE | Low | libstdc++-11.5.0-5.el9_5 | 0.00050 | false | ||
| CVE-2025-45582 | Anchore CVE | Medium | tar-2:1.34-7.el9 | 0.00049 | false | ||
| CVE-2025-45582 | Twistlock CVE | Medium | tar-2:1.34-7.el9 | 0.00049 | false | ||
| CVE-2025-5915 | Twistlock CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00035 | false | ||
| CVE-2025-5915 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00035 | false | ||
| CVE-2025-32989 | Twistlock CVE | Medium | gnutls-3.8.3-6.el9 | 0.00034 | false | ||
| CVE-2025-32989 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00034 | false | ||
| CVE-2025-32989 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00034 | false | ||
| CVE-2025-32989 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00034 | false | ||
| CVE-2024-43167 | Twistlock CVE | Low | unbound-1.16.2-19.el9_6.1 | 0.00034 | false | ||
| CVE-2024-43167 | Anchore CVE | Low | unbound-libs-1.16.2-19.el9_6.1 | 0.00034 | false | ||
| CVE-2025-5916 | Twistlock CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00031 | false | ||
| CVE-2025-5916 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00031 | false | ||
| CVE-2023-4156 | Twistlock CVE | Low | gawk-5.1.0-6.el9 | 0.00031 | false | ||
| CVE-2023-4156 | Anchore CVE | Low | gawk-5.1.0-6.el9 | 0.00031 | false | ||
| CVE-2025-6170 | Twistlock CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00029 | false | ||
| CVE-2025-6170 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00029 | false | ||
| CVE-2025-9230 | Anchore CVE | Medium | openssl-libs-1:3.2.2-6.el9_5.1 | 0.00026 | false | ||
| CVE-2025-9230 | Twistlock CVE | Medium | openssl-1:3.2.2-6.el9_5.1 | 0.00026 | false | ||
| CVE-2025-5917 | Twistlock CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00026 | false | ||
| CVE-2025-5917 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00026 | false | ||
| CVE-2025-9714 | Twistlock CVE | Medium | libxml2-2.9.13-12.el9_6 | 0.00025 | false | ||
| CVE-2025-9714 | Anchore CVE | Medium | libxml2-2.9.13-12.el9_6 | 0.00025 | false | ||
| CVE-2025-5918 | Twistlock CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00025 | false | ||
| CVE-2025-5918 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00025 | false | ||
| CVE-2025-5278 | Twistlock CVE | Medium | coreutils-8.32-39.el9 | 0.00025 | false | ||
| CVE-2025-5278 | Anchore CVE | Medium | coreutils-single-8.32-39.el9 | 0.00025 | false | ||
| CVE-2025-9232 | Anchore CVE | Low | openssl-libs-1:3.2.2-6.el9_5.1 | 0.00023 | false | ||
| CVE-2025-9232 | Twistlock CVE | Low | openssl-1:3.2.2-6.el9_5.1 | 0.00023 | false | ||
| CVE-2025-50181 | Twistlock CVE | Medium | python-pip-21.3.1-1.el9 | 0.00023 | false | ||
| CVE-2025-50181 | Anchore CVE | Medium | python3-pip-wheel-21.3.1-1.el9 | 0.00023 | false | ||
| CVE-2025-30258 | Twistlock CVE | Low | gnupg2-2.3.3-4.el9 | 0.00022 | false | ||
| CVE-2025-30258 | Anchore CVE | Low | gnupg2-2.3.3-4.el9 | 0.00022 | false | ||
| CVE-2024-0232 | Twistlock CVE | Low | sqlite-3.34.1-8.el9_6 | 0.00018 | false | ||
| CVE-2024-0232 | Anchore CVE | Low | sqlite-libs-3.34.1-8.el9_6 | 0.00018 | false | ||
| CVE-2025-50182 | Twistlock CVE | Medium | python-pip-21.3.1-1.el9 | 0.00014 | false | ||
| CVE-2025-50182 | Anchore CVE | Medium | python3-pip-wheel-21.3.1-1.el9 | 0.00014 | false | ||
| CVE-2025-4516 | Twistlock CVE | Medium | python3.9-3.9.21-2.el9_6.1 | 0.00013 | false | ||
| CVE-2025-4516 | Anchore CVE | Medium | python3-libs-3.9.21-2.el9_6.1 | 0.00013 | false | ||
| CVE-2025-4516 | Anchore CVE | Medium | python-unversioned-command-3.9.21-2.el9_6.1 | 0.00013 | false | ||
| CVE-2025-4516 | Anchore CVE | Medium | python3-3.9.21-2.el9_6.1 | 0.00013 | false | ||
| CVE-2023-30571 | Twistlock CVE | Medium | libarchive-3.5.3-6.el9_6 | 0.00013 | false | ||
| CVE-2023-30571 | Anchore CVE | Medium | libarchive-3.5.3-6.el9_6 | 0.00013 | false | ||
| CVE-2022-3219 | Twistlock CVE | Low | gnupg2-2.3.3-4.el9 | 0.00012 | false | ||
| CVE-2022-3219 | Anchore CVE | Low | gnupg2-2.3.3-4.el9 | 0.00012 | false | ||
| CVE-2025-62813 | Anchore CVE | Medium | lz4-libs-1.9.3-5.el9 | N/A | false | ||
| CVE-2025-52099 | Twistlock CVE | Medium | sqlite-3.34.1-8.el9_6 | N/A | false | ||
| CVE-2025-52099 | Anchore CVE | Medium | sqlite-libs-3.34.1-8.el9_6 | N/A | false | ||
| CVE-2025-11411 | Twistlock CVE | Medium | unbound-1.16.2-19.el9_6.1 | N/A | false | ||
| CVE-2025-11411 | Anchore CVE | Medium | unbound-libs-1.16.2-19.el9_6.1 | N/A | false | ||
| cbff271f45d32e78dcc1979dbca9c14d | Anchore Compliance | Critical | N/A | N/A | |||
| c2e44319ae5b3b040044d8ae116d1c2f | Anchore Compliance | Low | N/A | N/A | |||
| RHSA-2025:16116 | OSCAP Compliance | Low | N/A | N/A | |||
| RHSA-2025:15019 | OSCAP Compliance | Low | N/A | N/A | |||
| GO-2025-3900 | Twistlock CVE | Medium | github.com/go-viper/mapstructure/v2-v2.2.1 | N/A | N/A | ||
| GO-2025-3787 | Twistlock CVE | Medium | github.com/go-viper/mapstructure/v2-v2.2.1 | N/A | N/A | ||
| GHSA-fv92-fjc5-jj9h | Anchore CVE | Medium | github.com/go-viper/mapstructure/v2-v2.2.1 | N/A | N/A | ||
| GHSA-2464-8j7c-4cjm | Anchore CVE | Medium | github.com/go-viper/mapstructure/v2-v2.2.1 | N/A | N/A | ||
| CCE-90848-3 | OSCAP Compliance | Low | N/A | N/A | |||
| CCE-90847-5 | OSCAP Compliance | Low | N/A | N/A | |||
| CCE-90845-9 | OSCAP Compliance | Low | N/A | N/A | |||
| CCE-90125-6 | OSCAP Compliance | High | N/A | N/A | |||
| CCE-89732-2 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-89706-6 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-88048-4 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-87567-4 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-87332-3 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-87087-3 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-86932-1 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-86917-2 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-86858-8 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-86570-9 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-86502-2 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-86474-4 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-86208-6 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-84068-6 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83891-2 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83881-3 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83857-3 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83647-8 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83644-5 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83635-3 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83627-0 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83610-6 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83606-4 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83506-6 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83487-9 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83468-9 | OSCAP Compliance | Low | N/A | N/A | |||
| CCE-83466-3 | OSCAP Compliance | Low | N/A | N/A | |||
| CCE-83450-7 | OSCAP Compliance | High | N/A | N/A | |||
| 639f6f1177735759703e928c14714a59 | Anchore Compliance | Low | N/A | N/A | |||
| 463a9a24225c26f7a5bf3f38908e5cb3 | Anchore Compliance | Low | N/A | N/A |
More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=big-bang/compliance-dashboard-collector&tag=0.0.4&branch=master
Tasks
Contributor:
-
Apply the StatusReview label to this issue for a merge request reviewand wait for feedback
OR
-
Provide justifications for findings in the VAT (docs) -
Apply the StatusVerification label to this issue for a VAT justifications reviewand wait for feedback
Iron Bank:
-
Review findings and justifications
Note: If the above process is rejected for any reason, the
RevieworVerificationlabel will be removed and the issue will be sent back toTo-Do. Any comments will be listed in this issue for you to address. Once they have been addressed, you must re-add theRevieworVerificationlabel.
Questions?
Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add /cc @ironbank-notifications/onboarding.
Additionally, Iron Bank hosts an AMA working session every Wednesday from 1630-1730EST to answer questions.
Edited by CHORE_TOKEN