chore(findings): softwarfare/swis-redis
Summary
softwarfare/swis-redis has 69 new findings discovered during continuous monitoring.
More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=softwarfare/swis-redis&tag=0.19.1&branch=master
EPSS (Exploit Prediction Scoring System) provides an estimate of the likelihood that a vulnerability will be exploited in the wild.
KEV (Known Exploited Vulnerabilities) indicates whether a vulnerability is actively being exploited according to CISA.
| id | source | severity | package | impact | workaround | epss_score | kev |
|---|---|---|---|---|---|---|---|
| CVE-2024-1931 | Twistlock CVE | Medium | unbound-1.16.2-21.el9 | 0.06753 | false | ||
| CVE-2024-1931 | Anchore CVE | Medium | unbound-libs-1.16.2-21.el9 | 0.06753 | false | ||
| CVE-2024-7264 | Twistlock CVE | Low | curl-7.76.1-34.el9 | 0.06460 | false | ||
| CVE-2024-7264 | Anchore CVE | Low | libcurl-minimal-7.76.1-34.el9 | 0.06460 | false | ||
| CVE-2024-7264 | Anchore CVE | Low | curl-minimal-7.76.1-34.el9 | 0.06460 | false | ||
| CVE-2024-33655 | Twistlock CVE | Low | unbound-1.16.2-21.el9 | 0.03995 | false | ||
| CVE-2024-33655 | Anchore CVE | Low | unbound-libs-1.16.2-21.el9 | 0.03995 | false | ||
| CVE-2024-9681 | Twistlock CVE | Low | curl-7.76.1-34.el9 | 0.00571 | false | ||
| CVE-2024-9681 | Anchore CVE | Low | curl-minimal-7.76.1-34.el9 | 0.00571 | false | ||
| CVE-2024-9681 | Anchore CVE | Low | libcurl-minimal-7.76.1-34.el9 | 0.00571 | false | ||
| CVE-2024-41996 | Twistlock CVE | Low | openssl-1:3.5.1-3.el9 | 0.00446 | false | ||
| CVE-2024-41996 | Anchore CVE | Low | openssl-libs-1:3.5.1-3.el9 | 0.00446 | false | ||
| CVE-2024-11053 | Twistlock CVE | Low | curl-7.76.1-34.el9 | 0.00337 | false | ||
| CVE-2024-11053 | Anchore CVE | Low | libcurl-minimal-7.76.1-34.el9 | 0.00337 | false | ||
| CVE-2024-11053 | Anchore CVE | Low | curl-minimal-7.76.1-34.el9 | 0.00337 | false | ||
| CVE-2025-1795 | Twistlock CVE | Low | python3.9-3.9.23-2.el9 | 0.00236 | false | ||
| CVE-2025-1795 | Anchore CVE | Low | python-unversioned-command-3.9.23-2.el9 | 0.00236 | false | ||
| CVE-2025-1795 | Anchore CVE | Low | python3-3.9.23-2.el9 | 0.00236 | false | ||
| CVE-2025-1795 | Anchore CVE | Low | python3-libs-3.9.23-2.el9 | 0.00236 | false | ||
| CVE-2023-32636 | Twistlock CVE | Low | glib2-2.68.4-18.el9_7 | 0.00165 | false | ||
| CVE-2023-32636 | Anchore CVE | Low | glib2-2.68.4-18.el9_7 | 0.00165 | false | ||
| CVE-2024-13176 | Twistlock CVE | Low | openssl-1:3.5.1-3.el9 | 0.00118 | false | ||
| CVE-2024-13176 | Anchore CVE | Low | openssl-libs-1:3.5.1-3.el9 | 0.00118 | false | ||
| CVE-2025-6069 | Twistlock CVE | Medium | python3.9-3.9.23-2.el9 | 0.00116 | false | ||
| CVE-2025-6069 | Anchore CVE | Medium | python-unversioned-command-3.9.23-2.el9 | 0.00116 | false | ||
| CVE-2025-6069 | Anchore CVE | Medium | python3-3.9.23-2.el9 | 0.00116 | false | ||
| CVE-2025-6069 | Anchore CVE | Medium | python3-libs-3.9.23-2.el9 | 0.00116 | false | ||
| CVE-2025-7039 | Twistlock CVE | Low | glib2-2.68.4-18.el9_7 | 0.00089 | false | ||
| CVE-2025-9086 | Twistlock CVE | Medium | curl-7.76.1-34.el9 | 0.00077 | false | ||
| CVE-2025-9086 | Anchore CVE | Medium | libcurl-minimal-7.76.1-34.el9 | 0.00077 | false | ||
| CVE-2025-9086 | Anchore CVE | Medium | curl-minimal-7.76.1-34.el9 | 0.00077 | false | ||
| CVE-2025-8291 | Twistlock CVE | Medium | python3.9-3.9.23-2.el9 | 0.00073 | false | ||
| CVE-2025-8291 | Anchore CVE | Medium | python-unversioned-command-3.9.23-2.el9 | 0.00073 | false | ||
| CVE-2025-8291 | Anchore CVE | Medium | python3-3.9.23-2.el9 | 0.00073 | false | ||
| CVE-2025-8291 | Anchore CVE | Medium | python3-libs-3.9.23-2.el9 | 0.00073 | false | ||
| CVE-2025-3360 | Twistlock CVE | Low | glib2-2.68.4-18.el9_7 | 0.00061 | false | ||
| CVE-2025-3360 | Anchore CVE | Low | glib2-2.68.4-18.el9_7 | 0.00061 | false | ||
| CVE-2024-43168 | Twistlock CVE | Low | unbound-1.16.2-21.el9 | 0.00057 | false | ||
| CVE-2024-43168 | Anchore CVE | Low | unbound-libs-1.16.2-21.el9 | 0.00057 | false | ||
| CVE-2025-4598 | Twistlock CVE | Medium | systemd-252-55.el9_7.2 | 0.00053 | false | ||
| CVE-2025-4598 | Anchore CVE | Medium | systemd-libs-252-55.el9_7.2 | 0.00053 | false | ||
| CVE-2023-50495 | Twistlock CVE | Low | ncurses-6.2-12.20210508.el9 | 0.00050 | false | ||
| CVE-2023-50495 | Anchore CVE | Low | ncurses-libs-6.2-12.20210508.el9 | 0.00050 | false | ||
| CVE-2023-50495 | Anchore CVE | Low | ncurses-base-6.2-12.20210508.el9 | 0.00050 | false | ||
| CVE-2022-27943 | Twistlock CVE | Low | gcc-11.5.0-11.el9 | 0.00050 | false | ||
| CVE-2022-27943 | Anchore CVE | Low | libstdc++-11.5.0-11.el9 | 0.00050 | false | ||
| CVE-2024-43167 | Twistlock CVE | Low | unbound-1.16.2-21.el9 | 0.00034 | false | ||
| CVE-2024-43167 | Anchore CVE | Low | unbound-libs-1.16.2-21.el9 | 0.00034 | false | ||
| CVE-2025-9230 | Twistlock CVE | Medium | openssl-1:3.5.1-3.el9 | 0.00026 | false | ||
| CVE-2025-9230 | Anchore CVE | Medium | openssl-libs-1:3.5.1-3.el9 | 0.00026 | false | ||
| CVE-2025-9232 | Twistlock CVE | Low | openssl-1:3.5.1-3.el9 | 0.00023 | false | ||
| CVE-2025-9232 | Anchore CVE | Low | openssl-libs-1:3.5.1-3.el9 | 0.00023 | false | ||
| CVE-2024-0232 | Twistlock CVE | Low | sqlite-3.34.1-9.el9_7 | 0.00018 | false | ||
| CVE-2024-0232 | Anchore CVE | Low | sqlite-libs-3.34.1-9.el9_7 | 0.00018 | false | ||
| CVE-2025-4516 | Twistlock CVE | Medium | python3.9-3.9.23-2.el9 | 0.00013 | false | ||
| CVE-2025-4516 | Anchore CVE | Medium | python-unversioned-command-3.9.23-2.el9 | 0.00013 | false | ||
| CVE-2025-4516 | Anchore CVE | Medium | python3-3.9.23-2.el9 | 0.00013 | false | ||
| CVE-2025-4516 | Anchore CVE | Medium | python3-libs-3.9.23-2.el9 | 0.00013 | false | ||
| CVE-2025-6075 | Twistlock CVE | Low | python3.9-3.9.23-2.el9 | N/A | false | ||
| CVE-2025-6075 | Anchore CVE | Low | python3-libs-3.9.23-2.el9 | N/A | false | ||
| CVE-2025-6075 | Anchore CVE | Low | python-unversioned-command-3.9.23-2.el9 | N/A | false | ||
| CVE-2025-6075 | Anchore CVE | Low | python3-3.9.23-2.el9 | N/A | false | ||
| CVE-2025-52099 | Twistlock CVE | Medium | sqlite-3.34.1-9.el9_7 | N/A | false | ||
| CVE-2025-52099 | Anchore CVE | Medium | sqlite-libs-3.34.1-9.el9_7 | N/A | false | ||
| CVE-2025-11411 | Twistlock CVE | Medium | unbound-1.16.2-21.el9 | N/A | false | ||
| CVE-2025-11411 | Anchore CVE | Medium | unbound-libs-1.16.2-21.el9 | N/A | false | ||
| CVE-2025-10966 | Twistlock CVE | Medium | curl-7.76.1-34.el9 | N/A | false | ||
| CVE-2025-10966 | Anchore CVE | Medium | libcurl-minimal-7.76.1-34.el9 | N/A | false | ||
| CVE-2025-10966 | Anchore CVE | Medium | curl-minimal-7.76.1-34.el9 | N/A | false |
More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=softwarfare/swis-redis&tag=0.19.1&branch=master
Tasks
Contributor:
-
Apply the StatusReview label to this issue for a merge request reviewand wait for feedback
OR
-
Provide justifications for findings in the VAT (docs) -
Apply the StatusVerification label to this issue for a VAT justifications reviewand wait for feedback
Iron Bank:
-
Review findings and justifications
Note: If the above process is rejected for any reason, the
RevieworVerificationlabel will be removed and the issue will be sent back toTo-Do. Any comments will be listed in this issue for you to address. Once they have been addressed, you must re-add theRevieworVerificationlabel.
Questions?
Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add /cc @ironbank-notifications/onboarding.
Additionally, Iron Bank hosts an AMA working session every Wednesday from 1630-1730EST to answer questions.