text4shell-policy

Text4Shell 데모 이 데모는 Sigstore를 사용하여 서명된 SBOM을 Kubernetes 또는 명령줄에서 text4shell 정책에 대해 검증하는 방법을 보여줍니다. 옵션 1: cue와 cosign 2.0을 사용하여 원격 OCI 이미지가 영향을 받는지 확인 cosign verify-attestation --policy policy/text4shell.cue --type https://cyclonedx.org/bom --certificate-identity-regexp=...

CVE-2025-64518: Improper Restriction of XML External Entity Reference

The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, validating, and parsing SBOMs. Starting in version 2.1.0 and prior to version 11.0.1, the XML Validator used by cyclonedx-core-java was not configured securely, making the library...