Skip to content

馃毃 Security: Critical or high vulnerabilities in ida-pro-mcp container#986

Description

@github-actions

馃毃 Security Scan Alert

A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.

  • Image: ghcr.io/stacklok/dockyard/uvx/ida-pro-mcp:1.4.0
  • Critical vulnerabilities: 0
  • High vulnerabilities: 1

Details

See the Security tab for full details.

High Vulnerabilities

  • GHSA-8xx6-hgc6-gc2m in httpx2@2.10.0: HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)

Automated security scan from periodic-security-scan workflow

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions