VYPR

Clair

by Red Hat

Source repositories

CVEs (1)

  • CVE-2021-3762CriMar 3, 2022
    risk 0.57cvss 9.8epss 0.05

    A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution.