Attack in progressA leaked CI key of ‹ci-deploy-bot› is being used to break in: 6 accounts and machines created.Open the case
WD-DEMO-0104 Demo: fictional advisory
What this advisory says, and whether it applies to what you run. The answer is worked out for each running thing, never as a single yes or no.
Title
‹Low-severity flaw 5 in a sample library›
A title is written by a third party. It is shown as text and decides nothing.
Other ids for it
No trusted alias is recorded.
Only ids joined by a reviewed source, the distribution's own feed or a curator are listed.
When Warden learned of it
Warden learned of it at 9 August 10:12 UTC.
It first matched something you run at 9 August 11:00 UTC.
Dates
- Published 9 August.
- First in the feed 9 August.
How likely, and how used
- No EPSS score is held.
- No public exploit is listed.
Fixed versions
purl:pkg:npm/sample-lib-4: Fixed in 1.4.5; named by OSV.
Are we affected?
Affected
A match, with how sure it is.
Affected: 7
| What | Kind | Answer |
|---|---|---|
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Affected (confirmed). |
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Affected (confirmed). |
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Affected (confirmed). |
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Affected (confirmed). |
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Affected (confirmed). |
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Affected (confirmed). |
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Affected (confirmed). |
Not affected
A source that lists this kind of software completely finished reading it, and the version or the absence rules the flaw out.
Not affected: 0
Nothing.
Scanner reports none
A scanner covers it and scanned it after this advisory appeared, and reports nothing. That is not the same as not affected.
Scanner reports none: 13
| What | Kind | Answer |
|---|---|---|
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(60 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(58 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:lambda:eu-west-1:123456789012…(58 chars)› | function | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(61 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(60 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(59 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(64 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(57 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
‹arn:aws:ecr:eu-west-1:123456789012:re…(55 chars)› | image | Scanner reports none: Inspector scanned it after this advisory appeared and reports nothing for it. |
Could not tell
Nothing could rule it in or out, with the reason.
Could not tell: 6
| What | Kind | Answer |
|---|---|---|
‹i-0a1b2c3d4e5f60718› | instance | Could not tell: SSM lists operating system packages only; it does not list JavaScript packages. |
‹arn:aws:elasticache:eu-west-1:1234567…(59 chars)› | database | Could not tell: nothing that read it lists them; it does not list JavaScript packages. |
‹arn:aws:eks:eu-west-1:123456789012:cl…(52 chars)› | cluster | Could not tell: nothing that read it lists them; it does not list JavaScript packages. |
‹arn:aws:lambda:ap-southeast-2:1234567…(63 chars)› | function | Could not tell: nothing could be read on it. |
‹i-0b2c3d4e5f6071829› | instance | Could not tell: SSM lists operating system packages only; it does not list JavaScript packages. |
‹arn:aws:rds:eu-west-1:123456789012:db:orders-db› | database | Could not tell: nothing that read it lists them; it does not list JavaScript packages. |