Demo on recorded data — get early access
VulnerabilitiesSign out

Vulnerabilities

Known flaws in the software your accounts and clusters run, ranked by code: what is being used against others, what could be reached, and what a flaw could do here.

Advisory knowledge as of 09:52 UTC (8 minutes ago) · 3 fix now · 2 this week · 6 to plan · 301 in the long tail · Software read for 25 of 29 running things

Search takes an advisory id, such as CVE-2026-12345, or a product picked from the list. It does not search free text.

Fix now

One card for each change that closes the most. Each change is a single step, such as moving an image or updating a package.

high Move ‹arn:aws:ecr:eu-west-1:123456789012:re…(60 chars)› to 8.3.9 or later: fixes 1 vulnerability, 1 exploited

Why

  • Exploited in the wild, as a curator reports.
  • Reachable from the internet through ‹alb-front›.

The fix

Update to 8.3.9 or later; released 5 hours ago. A fix this young may not have been tried widely.

What it closes

1 advisory on 1 running thing

Signs of use

Checked for signs of use: no matching evidence in 30 days

OpenPropose fix

critical Move ‹arn:aws:ecr:eu-west-1:123456789012:re…(64 chars)› to 1.9.5 or later: fixes 1 vulnerability

Why

  • A public exploit exists.
  • Reachable from the internet through ‹alb-front›.

The fix

Update to 1.9.5 or later; released 2 days ago. A fix this young may not have been tried widely.

What it closes

1 advisory on 1 running thing

Signs of use

No check for signs of use has run for this one.

OpenPropose fix

critical Move ‹arn:aws:ecr:eu-west-1:123456789012:re…(58 chars)› to 3.2.1 or later: fixes 1 vulnerability

Why

  • The package is proven malicious by its own file.
  • Reachable from the internet through ‹alb-front›.

The fix

Update to 3.2.1 or later; released 30 hours ago. A fix this young may not have been tried widely.

What it closes

1 advisory on 1 running thing

Signs of use

No check for signs of use has run for this one.

OpenPropose fix

New today

Advisories that reached the feed, the known-exploited list or a curator in the last 24 hours and match something you run.

AdvisoryAffectedNot affectedScanner reports noneCould not tell
WD-DEMO-0001 Demo: fictional advisory10124

This week

SeverityChangeClosesFix
highMove ‹arn:aws:ecr:eu-west-1:123456789012:re…(59 chars)› to 2.17.1 or later: fixes 1 vulnerability, 1 exploited1 advisory on 1 running thingUpdate to 2.17.1 or laterOpen
highMove ‹arn:aws:ecr:eu-west-1:123456789012:re…(60 chars)› to 9.9.9 or later: fixes 1 vulnerability1 advisory on 1 running thingUpdate to 9.9.9 or laterOpen

Plan

SeverityChangeClosesFix
mediumUpdate the package on ‹i-0b2c3d4e5f6071829› to 22.04.5 or later: fixes 1 vulnerability1 advisory on 1 running thingUpdate to 22.04.5 or laterOpen
mediumUpdate the package on ‹arn:aws:lambda:eu-west-1:123456789012…(58 chars)› to 3.12 or later: fixes 1 vulnerability1 advisory on 1 running thingUpdate to 3.12 or laterOpen
mediumUpgrade ‹arn:aws:eks:eu-west-1:123456789012:cl…(52 chars)› to 1.32.0 or later: fixes 1 vulnerability1 advisory on 1 running thingUpdate to 1.32.0 or laterOpen
mediumUpgrade ‹arn:aws:rds:eu-west-1:123456789012:db:orders-db› to 16.4 or later: fixes 1 vulnerability1 advisory on 1 running thingUpdate to 16.4 or laterOpen
mediumUpgrade ‹arn:aws:elasticache:eu-west-1:1234567…(59 chars)› to 7.1.4 or later: fixes 1 vulnerability1 advisory on 1 running thingUpdate to 7.1.4 or laterOpen
mediumMove ‹arn:aws:ecr:eu-west-1:123456789012:re…(57 chars)› to 3.2.1 or later: fixes 1 vulnerability1 advisory on 1 running thingUpdate to 3.2.1 or laterOpen

Long tail

Everything else that matches, grouped by what it runs on. Filter it, or download it.

Filter the long tail Clear filters

301 of 301 shown

BandAdvisoryWhatKindAccountRegionExploitedInternetConfidenceFix
Long tailWD-DEMO-0011 Demo: fictional advisory‹i-0a1b2c3d4e5f60718›instanceacct-prodnone knownNoconfirmedYes
Long tailWD-DEMO-0100 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0101 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0102 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0103 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0104 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0105 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0106 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0107 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0108 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0109 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0110 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0111 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0112 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0113 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0114 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0115 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0116 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0117 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0118 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0119 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0120 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0121 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0122 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0123 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0124 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0107 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0108 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0109 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0110 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0111 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0112 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0113 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0114 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0115 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0116 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0117 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0118 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0119 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0120 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0121 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0122 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0123 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0124 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0125 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0126 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0127 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0128 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0129 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0130 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0131 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0114 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0115 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0116 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0117 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0118 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0119 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0120 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0121 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0122 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0123 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0124 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0125 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0126 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0127 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0128 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0129 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0130 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0131 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0132 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0133 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0134 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0135 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0136 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0137 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0138 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0121 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0122 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0123 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0124 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0125 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0126 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0127 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0128 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0129 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0130 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0131 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0132 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0133 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0134 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0135 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0136 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0137 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0138 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0139 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0140 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0141 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0142 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0143 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes
Long tailWD-DEMO-0144 Demo: fictional advisory‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›imageacct-prodeu-west-1none knownNoconfirmedYes

and 201 more. Download CSV has them all.

Download CSV Download JSON

Downloads name each thing by its handle unless you choose the names. Download CSV with names · Download JSON with names

Accepted

Findings someone decided to live with, with the reason, who signed and the date it ends. Nothing is hidden.

ReasonWhatSigned byEnds
compensating control‹e/neWNjnf3e8zd› WD-DEMO-0003 Demo: fictional advisory‹alice›20 days left

By resource

Each thing that runs software with a known flaw, and how many.

WhatBandMatches
‹e/DyCwE3guSvvP›Fix now1
‹e/J7VxCMHwFDqo›Fix now1
‹e/rGrpx2Mg1Myo›Fix now1
‹e/mqY7M4yC7hJW›This week1
‹e/neWNjnf3e8zd›This week1
‹e/EvJnJM93iHzr›Plan1
‹e/G3pkd69zF94G›Plan1
‹e/SrjA1D4NHLhu›Plan1
‹e/U1YhS32Pzw5c›Plan1
‹e/iYknduUM6aFV›Plan1
‹e/y3JLmMN21KAr›Plan1
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)›Long tail25
‹i-0a1b2c3d4e5f60718›Long tail1

By advisory

Each advisory that matches, and how many things it matches.

AdvisoryBandMatches
WD-DEMO-0004 Demo: fictional advisoryFix now2
WD-DEMO-0001 Demo: fictional advisoryFix now1
WD-DEMO-0002 Demo: fictional advisoryFix now1
WD-DEMO-0003 Demo: fictional advisoryThis week1
WD-DEMO-0010 Demo: fictional advisoryThis week1
WD-DEMO-0005 Demo: fictional advisoryPlan1
WD-DEMO-0006 Demo: fictional advisoryPlan1
WD-DEMO-0007 Demo: fictional advisoryPlan1
WD-DEMO-0008 Demo: fictional advisoryPlan1
WD-DEMO-0009 Demo: fictional advisoryPlan1
WD-DEMO-0121 Demo: fictional advisoryLong tail8
WD-DEMO-0128 Demo: fictional advisoryLong tail8
WD-DEMO-0135 Demo: fictional advisoryLong tail8
WD-DEMO-0100 Demo: fictional advisoryLong tail7
WD-DEMO-0104 Demo: fictional advisoryLong tail7
WD-DEMO-0107 Demo: fictional advisoryLong tail7
WD-DEMO-0111 Demo: fictional advisoryLong tail7
WD-DEMO-0114 Demo: fictional advisoryLong tail7
WD-DEMO-0118 Demo: fictional advisoryLong tail7
WD-DEMO-0119 Demo: fictional advisoryLong tail7
WD-DEMO-0120 Demo: fictional advisoryLong tail7
WD-DEMO-0122 Demo: fictional advisoryLong tail7
WD-DEMO-0123 Demo: fictional advisoryLong tail7
WD-DEMO-0124 Demo: fictional advisoryLong tail7
WD-DEMO-0125 Demo: fictional advisoryLong tail7
WD-DEMO-0126 Demo: fictional advisoryLong tail7
WD-DEMO-0127 Demo: fictional advisoryLong tail7
WD-DEMO-0129 Demo: fictional advisoryLong tail7
WD-DEMO-0130 Demo: fictional advisoryLong tail7
WD-DEMO-0131 Demo: fictional advisoryLong tail7
WD-DEMO-0132 Demo: fictional advisoryLong tail7
WD-DEMO-0133 Demo: fictional advisoryLong tail7
WD-DEMO-0134 Demo: fictional advisoryLong tail7
WD-DEMO-0136 Demo: fictional advisoryLong tail7
WD-DEMO-0137 Demo: fictional advisoryLong tail7
WD-DEMO-0138 Demo: fictional advisoryLong tail7
WD-DEMO-0142 Demo: fictional advisoryLong tail7
WD-DEMO-0101 Demo: fictional advisoryLong tail6
WD-DEMO-0102 Demo: fictional advisoryLong tail6
WD-DEMO-0103 Demo: fictional advisoryLong tail6
WD-DEMO-0105 Demo: fictional advisoryLong tail6
WD-DEMO-0106 Demo: fictional advisoryLong tail6
WD-DEMO-0108 Demo: fictional advisoryLong tail6
WD-DEMO-0109 Demo: fictional advisoryLong tail6
WD-DEMO-0110 Demo: fictional advisoryLong tail6
WD-DEMO-0112 Demo: fictional advisoryLong tail6
WD-DEMO-0113 Demo: fictional advisoryLong tail6
WD-DEMO-0115 Demo: fictional advisoryLong tail6
WD-DEMO-0116 Demo: fictional advisoryLong tail6
WD-DEMO-0117 Demo: fictional advisoryLong tail6

and 6 more

What runs

How much software Warden has read, by kind, and which source can answer for it.

KindSourceReadIt
Java librariesInspector2 of 22 readcan only say it reports none
JavaScript packagesInspector14 of 22 readcan only say it reports none
JavaScript packagesInspector software list9 of 9 readcan only say it reports none
operating system packagesSSM inventory2 of 5 readcan say a flaw does not apply
Python packagesInspector6 of 22 readcan only say it reports none

What to enable

Options in AWS that would let Warden read more. Warden turns none of them on.

  • Turn on Inspector for EC2 in ap-southeast-2 (‹123456789012›): covers 4 instances; about USD 5 a month.

    Lists the packages on instances that have no Systems Manager agent, with their fixed versions.

    AWS's steps: In the Amazon Inspector console, open Account management, choose the account, and activate scanning for Amazon EC2. In an organisation, the Inspector administrator can activate it for members.

  • Turn on Default Host Management Configuration in eu-west-1 (‹123456789012›): covers 3 instances; no charge from AWS for this.

    Lets Systems Manager manage every instance in the account, so Warden can read its package list and answer "not affected" for operating system packages.

    AWS's steps: In AWS Systems Manager, open Fleet Manager, then Account management, then Configure Default Host Management Configuration, and choose the default role.

  • Turn on Inspector for Lambda in ap-southeast-2 (‹123456789012›): covers 2 functions; about USD 1 a month.

    Lists the libraries inside Lambda packages and layers.

    AWS's steps: In the Amazon Inspector console, open Account management, choose the account, and activate scanning for AWS Lambda standard scanning.

  • Turn on basic scanning in ECR in eu-west-1 (‹123456789012›): covers 1 image; no charge from AWS for this.

    Finds operating system package flaws in images when Inspector is off. It runs when an image is pushed, or by hand.

    AWS's steps: In Amazon ECR, open the registry's private registry settings, choose scanning configuration, and select basic scanning with scan on push.

  • Add an ECR pull-through cache in eu-west-1 (‹acct-prod›): covers 1 image, 1 of them running; priced by what is stored, which depends on the images you pull.

    Images pulled from a public registry go through your ECR, where Inspector scans them. Today they are not scanned.

    AWS's steps: In Amazon ECR, open pull through cache settings, add a rule for the public registry, and change the workloads to pull through the cache's address.

  • Turn on Inspector for ECR in ap-southeast-2 (‹123456789012›): under USD 1 for the first scans, then under USD 1 a month.

    Scans the software inside container images, not only their operating system packages.

    AWS's steps: In the Amazon Inspector console, open Account management, choose the account, and activate scanning for Amazon ECR. Then, in Amazon ECR, set the registry's scanning configuration to enhanced scanning.

Warden turns none of these on. AWS's price list is the measure; prices differ by region.