-
Notifications
You must be signed in to change notification settings - Fork 22
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
13c3378
commit 644be36
Showing
4 changed files
with
57 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,8 @@ | ||
# Upstream CVEs | ||
|
||
# github.com/jackc/pgproto3/v2 - pgproto3 SQL Injection via Protocol Message Size Overflow | ||
GHSA-7jwh-3vrq-q3m8 | ||
# github.com/jackc/pgx/v4 - pgx SQL Injection via Line Comment Creation | ||
CVE-2024-27289 | ||
# github.com/jackc/pgx/v4 - pgx SQL Injection via Protocol Message Size Overflow | ||
CVE-2024-27304 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,23 @@ | ||
notify: | ||
emails: | ||
- [email protected] | ||
mattermost-channels: | ||
- ofi4for9obfq8m978h318x56ar | ||
--- | ||
version: 1 | ||
application: kratos | ||
is_chiselled: False | ||
description: "Ory Kratos is the developer-friendly, security-hardened and battle-tested Identity, \nUser Management and Authentication system for the Cloud." | ||
--- | ||
version: 1 | ||
upload: | ||
- source: "canonical/kratos-rock" | ||
commit: 396bf3a71cb65f97cf853540117858d6859ef43b | ||
directory: . | ||
release: | ||
1.1.0-22.04: | ||
risks: | ||
- stable | ||
- candidate | ||
- edge | ||
end-of-life: "2026-01-01T00:00:00Z" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,14 @@ | ||
version: 1 | ||
application: kratos | ||
is_chiselled: False | ||
description: | | ||
Ory Kratos is the developer-friendly, security-hardened and battle-tested Identity, | ||
User Management and Authentication system for the Cloud. | ||
The identity management server Ory Kratos enables you to implement user management, | ||
login and registration in a secure and straightforward way. | ||
Don't rewrite every aspect of identity management yourself. | ||
Ory Kratos implements all common flows such as login and logout, account activation, | ||
mfa/2fa, profile and session management, user facing errors and account recovery methods. | ||
Just spin up a docker image and write a simple UI for it in the language or framework of | ||
your choice. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,12 @@ | ||
version: 1 | ||
upload: | ||
- source: "canonical/kratos-rock" | ||
commit: 396bf3a71cb65f97cf853540117858d6859ef43b | ||
directory: . | ||
release: | ||
1.1.0-22.04: | ||
risks: | ||
- stable | ||
- candidate | ||
- edge | ||
end-of-life: "2025-05-01T00:00:00Z" |