The following is a list of CVEs that do not impact Pipelines.
CVE | Severity | Pipelines Fix Version | Reason |
|---|---|---|---|
Medium | 1.57.0 | Does not affect Pipelines. | |
Medium | 1.57.0 | Does not affect Pipelines. | |
Medium | 1.57.0 | Does not affect Pipelines. | |
Medium | 1.57.0 | Does not affect Pipelines. | |
Medium | 1.57.0 | Does not affect Pipelines. | |
Medium | 1.57.0 | Does not affect Pipelines. | |
Medium | 1.57.0 | Does not affect Pipelines. | |
High | 1.54.0 | Does not affect Pipelines. | |
Medium | 1.54.0 | Does not affect Pipelines. | |
High | 1.54.0 | Does not affect Pipelines. | |
High | 1.53.0 | Does not affect Pipelines. | |
Medium | 1.46.2 | Does not affect Pipelines. | |
High | 1.43.0 | Does not affect Pipelines. | |
Medium | 1.42.0 | Does not affect Pipelines. Upgraded Docker compose and Docker buildx. | |
High | 1.41.1 | Does not affect Pipelines. | |
High | 1.41.1 | Does not affect Pipelines. | |
High | 1.41.1 | Does not affect Pipelines. | |
High | 1.41.1 | Does not affect Pipelines. | |
Medium | 1.39.1 | Does not affect Pipelines. Upgraded Docker engine version. | |
High | 1.39.1 | Does not affect Pipelines. Upgraded Golang version. | |
High | N/A | Does not affect Pipelines. Removed an unnecessary dependency from the Pipelines build agent. | |
High | N/A | Does not affect Pipelines. Removed an unnecessary dependency from the Pipelines build agent. | |
High | 1.25.1 | Upgraded | |
Critical | 1.25.1 | Upgraded | |
Critical | 1.25.1 | Upgraded | |
Critical | 1.25.1 | Upgraded | |
High | 1.25.1 | Upgraded | |
High | 1.20.2 | Does not affect Pipelines, since | |
Critical | 1.20.2 | Does not affect Pipelines. Though the vulnerable library | |
High | 1.20.2 | Does not affect Pipelines, since | |
High | N/A | Does not impact Pipelines as core services control what commands are passed in to the git command. |