Skip to content

Commit f34666a

Browse files
sirutBuasaisirutBuasai
authored
Allowlist form-data (#5225)
1 parent 4faa1d1 commit f34666a

File tree

2 files changed

+122
-12
lines changed

2 files changed

+122
-12
lines changed

‎tensorflow/training/docker/2.19/py3/Dockerfile.sagemaker.cpu.os_scan_allowlist.json

Lines changed: 61 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,11 @@
1212
"version": "7.0.3",
1313
"release": null
1414
},
15-
"remediation": { "recommendation": { "text": "None Provided" } },
15+
"remediation": {
16+
"recommendation": {
17+
"text": "None Provided"
18+
}
19+
},
1620
"cvss_v3_score": 7.5,
1721
"cvss_v30_score": 0.0,
1822
"cvss_v31_score": 7.5,
@@ -37,7 +41,11 @@
3741
"version": "7.0.3",
3842
"release": null
3943
},
40-
"remediation": { "recommendation": { "text": "None Provided" } },
44+
"remediation": {
45+
"recommendation": {
46+
"text": "None Provided"
47+
}
48+
},
4149
"cvss_v3_score": 7.5,
4250
"cvss_v30_score": 0.0,
4351
"cvss_v31_score": 7.5,
@@ -64,7 +72,11 @@
6472
"version": "2.0.1",
6573
"release": null
6674
},
67-
"remediation": { "recommendation": { "text": "None Provided" } },
75+
"remediation": {
76+
"recommendation": {
77+
"text": "None Provided"
78+
}
79+
},
6880
"cvss_v3_score": 8.1,
6981
"cvss_v30_score": 0.0,
7082
"cvss_v31_score": 8.1,
@@ -91,7 +103,11 @@
91103
"version": "8.16.0",
92104
"release": null
93105
},
94-
"remediation": { "recommendation": { "text": "None Provided" } },
106+
"remediation": {
107+
"recommendation": {
108+
"text": "None Provided"
109+
}
110+
},
95111
"cvss_v3_score": 7.5,
96112
"cvss_v30_score": 0.0,
97113
"cvss_v31_score": 7.5,
@@ -116,7 +132,11 @@
116132
"version": "8.16.0",
117133
"release": null
118134
},
119-
"remediation": { "recommendation": { "text": "None Provided" } },
135+
"remediation": {
136+
"recommendation": {
137+
"text": "None Provided"
138+
}
139+
},
120140
"cvss_v3_score": 7.5,
121141
"cvss_v30_score": 0.0,
122142
"cvss_v31_score": 7.5,
@@ -143,7 +163,11 @@
143163
"version": "3.10.0",
144164
"release": null
145165
},
146-
"remediation": { "recommendation": { "text": "None Provided" } },
166+
"remediation": {
167+
"recommendation": {
168+
"text": "None Provided"
169+
}
170+
},
147171
"cvss_v3_score": 7.8,
148172
"cvss_v30_score": 0.0,
149173
"cvss_v31_score": 7.8,
@@ -156,5 +180,36 @@
156180
"title": "CVE-2025-8747 - keras",
157181
"reason_to_ignore": "N/A"
158182
}
183+
],
184+
"form-data": [
185+
{
186+
"description": "Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js.\n\nThis issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.",
187+
"vulnerability_id": "CVE-2025-7783",
188+
"name": "CVE-2025-7783",
189+
"package_name": "form-data",
190+
"package_details": {
191+
"file_path": "/usr/local/lib/python3.12/site-packages/jupyterlab/staging/yarn.lock",
192+
"name": "form-data",
193+
"package_manager": "NODE",
194+
"version": "4.0.2",
195+
"release": null
196+
},
197+
"remediation": {
198+
"recommendation": {
199+
"text": "None Provided"
200+
}
201+
},
202+
"cvss_v3_score": 0.0,
203+
"cvss_v30_score": 0.0,
204+
"cvss_v31_score": 0.0,
205+
"cvss_v2_score": 0.0,
206+
"cvss_v3_severity": "CRITICAL",
207+
"title": "CVE-2025-7783 - form-data",
208+
"source": "NVD",
209+
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
210+
"severity": "CRITICAL",
211+
"status": "ACTIVE",
212+
"reason_to_ignore": "N/A"
213+
}
159214
]
160215
}

‎tensorflow/training/docker/2.19/py3/cu125/Dockerfile.sagemaker.gpu.os_scan_allowlist.json

Lines changed: 61 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,11 @@
1212
"version": "7.0.3",
1313
"release": null
1414
},
15-
"remediation": { "recommendation": { "text": "None Provided" } },
15+
"remediation": {
16+
"recommendation": {
17+
"text": "None Provided"
18+
}
19+
},
1620
"cvss_v3_score": 7.5,
1721
"cvss_v30_score": 0.0,
1822
"cvss_v31_score": 7.5,
@@ -37,7 +41,11 @@
3741
"version": "7.0.3",
3842
"release": null
3943
},
40-
"remediation": { "recommendation": { "text": "None Provided" } },
44+
"remediation": {
45+
"recommendation": {
46+
"text": "None Provided"
47+
}
48+
},
4149
"cvss_v3_score": 7.5,
4250
"cvss_v30_score": 0.0,
4351
"cvss_v31_score": 7.5,
@@ -64,7 +72,11 @@
6472
"version": "2.0.1",
6573
"release": null
6674
},
67-
"remediation": { "recommendation": { "text": "None Provided" } },
75+
"remediation": {
76+
"recommendation": {
77+
"text": "None Provided"
78+
}
79+
},
6880
"cvss_v3_score": 8.1,
6981
"cvss_v30_score": 0.0,
7082
"cvss_v31_score": 8.1,
@@ -91,7 +103,11 @@
91103
"version": "8.16.0",
92104
"release": null
93105
},
94-
"remediation": { "recommendation": { "text": "None Provided" } },
106+
"remediation": {
107+
"recommendation": {
108+
"text": "None Provided"
109+
}
110+
},
95111
"cvss_v3_score": 7.5,
96112
"cvss_v30_score": 0.0,
97113
"cvss_v31_score": 7.5,
@@ -116,7 +132,11 @@
116132
"version": "8.16.0",
117133
"release": null
118134
},
119-
"remediation": { "recommendation": { "text": "None Provided" } },
135+
"remediation": {
136+
"recommendation": {
137+
"text": "None Provided"
138+
}
139+
},
120140
"cvss_v3_score": 7.5,
121141
"cvss_v30_score": 0.0,
122142
"cvss_v31_score": 7.5,
@@ -143,7 +163,11 @@
143163
"version": "3.10.0",
144164
"release": null
145165
},
146-
"remediation": { "recommendation": { "text": "None Provided" } },
166+
"remediation": {
167+
"recommendation": {
168+
"text": "None Provided"
169+
}
170+
},
147171
"cvss_v3_score": 7.8,
148172
"cvss_v30_score": 0.0,
149173
"cvss_v31_score": 7.8,
@@ -156,5 +180,36 @@
156180
"title": "CVE-2025-8747 - keras",
157181
"reason_to_ignore": "N/A"
158182
}
183+
],
184+
"form-data": [
185+
{
186+
"description": "Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js.\n\nThis issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.",
187+
"vulnerability_id": "CVE-2025-7783",
188+
"name": "CVE-2025-7783",
189+
"package_name": "form-data",
190+
"package_details": {
191+
"file_path": "/usr/local/lib/python3.12/site-packages/jupyterlab/staging/yarn.lock",
192+
"name": "form-data",
193+
"package_manager": "NODE",
194+
"version": "4.0.2",
195+
"release": null
196+
},
197+
"remediation": {
198+
"recommendation": {
199+
"text": "None Provided"
200+
}
201+
},
202+
"cvss_v3_score": 0.0,
203+
"cvss_v30_score": 0.0,
204+
"cvss_v31_score": 0.0,
205+
"cvss_v2_score": 0.0,
206+
"cvss_v3_severity": "CRITICAL",
207+
"title": "CVE-2025-7783 - form-data",
208+
"source": "NVD",
209+
"source_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7783",
210+
"severity": "CRITICAL",
211+
"status": "ACTIVE",
212+
"reason_to_ignore": "N/A"
213+
}
159214
]
160215
}

0 commit comments

Comments
 (0)