Change theme
Help
Press space for more information.
Show links for this issue (Shortcut: i, l)
Copy issue ID
Previous Issue (Shortcut: k)
Next Issue (Shortcut: j)
Sign in to use full features.
Vote: I am impacted
Notification menu
Refresh (Shortcut: Shift+r)
Go home (Shortcut: u)
Pending code changes (auto-populated)
View issue level access limits(Press Alt + Right arrow for more information)
Request for new functionality
View staffing
Description
However, when they use Artifactory Registry scans for vulnerabilities. They found all images got the same 11 vulnerabilities, including one marked as critical[2].
The images were provided by the Firebase team and they use it as-is. They do not modify or add anything from their end.
Other information:
- The new version of the extension is giving new vulnerabilities after the scan.
- Previously some of the images were fixed by the Firebase team. However, this extension is a beta feature which is not generally available.
What you expect to happen:
A) There should be no vulnerabilities as per the new release of the extension.
[1]
[2]