UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects

chore(findings): tetrate/istio/pilot (arm64)

    • Open Issue created by Ghost User @ghost

    Summary

    tetrate/istio/pilot (arm64) has 11 new findings discovered during continuous monitoring.

    More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=tetrate/istio/pilot&tag=1.23.5-tetratefips-v0-arm64&branch=master

    id source severity package impact workaround
    CVE-2024-45336 Anchore CVE Medium stdlib-go1.22.7
    CVE-2024-45336 Twistlock CVE Low net/http-1.22.7
    CVE-2024-45341 Anchore CVE Medium stdlib-go1.22.7
    CVE-2024-45341 Twistlock CVE Low crypto/x509-1.22.7
    CVE-2025-22866 Anchore CVE Medium stdlib-go1.22.7
    CVE-2025-22866 Twistlock CVE Low crypto/internal/nistec-1.22.7
    CVE-2025-27144 Twistlock CVE Medium github.com/go-jose/go-jose/v4-v4.0.1
    CVE-2025-27144 Twistlock CVE Medium github.com/go-jose/go-jose/v3-v3.0.3
    GHSA-c6gw-w398-hv78 Anchore CVE Medium github.com/go-jose/go-jose/v4-v4.0.1
    GHSA-c6gw-w398-hv78 Anchore CVE Medium github.com/go-jose/go-jose/v3-v3.0.3
    GHSA-qxp5-gwg8-xv66 Anchore CVE Medium golang.org/x/net-v0.33.0

    More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=tetrate/istio/pilot&tag=1.23.5-tetratefips-v0-arm64&branch=master

    Tasks

    Contributor:

    • Provide justifications for findings in the VAT (docs)
    • Apply the StatusVerification label to this issue and wait for feedback

    Iron Bank:

    • Review findings and justifications

    Note: If the above process is rejected for any reason, the Verification label will be removed and the issue will be sent back to Open. Any comments will be listed in this issue for you to address. Once they have been addressed, you must re-add the Verification label.

    Questions?

    Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add /cc @ironbank-notifications/onboarding.

    Additionally, Iron Bank hosts an AMA working session every Wednesday from 1630-1730EST to answer questions.

    0 of 3 checklist items completed · Edited
    To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information

    Child items 0

    • No child items are currently assigned. Use child items to break down this issue into smaller parts.

    Activity

    Please register or sign in to reply

    UNCLASSIFIED - NO CUI