You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The teleport 12.x and 13.x binaries all have github.com/sirupsen/logrus v1.9.0, which means that vulnerability scanners will list PRISMA-2023-0056.
CVE PACKAGE NAME SEVERITY ACTIONABLE PACKAGE VERSION PATH LAYER FIXED IN VERSION
PRISMA-2023-0056 github.com/sirupsen/logrus Medium TRUE v1.9.0 /usr/local/bin/tbot Unidentified fixed in v1.9.3
Current latest patch releases, at the time the issue was opened: 13.4.14, 12.4.32
Starting in Teleport 14.0.0, the logrus version is v1.9.3, so branch/v14 is not affected.
I do not know whether PRISMA-2023-0056 really impacts Teleport, but it does trigger some security scans. I couldn't find a CVE that corresponds to this identifier, so it may only be caught by some scanners.
The text was updated successfully, but these errors were encountered:
PRISMA-2023-0056 sirupsen/logrus#1370
The teleport 12.x and 13.x binaries all have
github.com/sirupsen/logrus v1.9.0
, which means that vulnerability scanners will listPRISMA-2023-0056
.Current latest patch releases, at the time the issue was opened: 13.4.14, 12.4.32
Starting in Teleport 14.0.0, the logrus version is v1.9.3, so branch/v14 is not affected.
I do not know whether
PRISMA-2023-0056
really impacts Teleport, but it does trigger some security scans. I couldn't find a CVE that corresponds to this identifier, so it may only be caught by some scanners.The text was updated successfully, but these errors were encountered: