GO-2025-4149: OSV-SCALIBR has NULL Pointer Dereference in github.com/google/osv-scalibr

dockersocket

package

v0.3.3 Latest Latest Go to latest Published: Sep 8, 2025 License: Apache-2.0 Imports: 15 Imported by: 0

Details

Rendered for

Package dockersocket implements a detector for Docker socket exposure vulnerabilities.

View Source

const (
	// Name of the detector.
	Name = "dockersocket"
)

This section is empty.

func New() detector.Detector

New returns a detector.

type Detector struct{}

Detector is a SCALIBR Detector for Docker socket exposure vulnerabilities.

func (d Detector) DetectedFinding() inventory.Finding

DetectedFinding returns generic vulnerability information about what is detected.

func (Detector) Name() string

Name of the detector.

func (Detector) RequiredExtractors() []string

RequiredExtractors returns an empty list as there are no dependencies.

func (Detector) Requirements() *plugin.Capabilities

Requirements of the Detector.

func (d Detector) Scan(ctx context.Context, scanRoot *scalibrfs.ScanRoot, px *packageindex.PackageIndex) (inventory.Finding, error)

Scan starts the scan.

func (d Detector) ScanFS(ctx context.Context, fsys fs.FS, px *packageindex.PackageIndex) (inventory.Finding, error)

ScanFS starts the scan from a pseudo-filesystem.

func (Detector) Version() int

Version of the detector.