31z4 / zookeeper-docker

Docker image packaging for Apache Zookeeper
MIT License
285 stars 243 forks source link

Zookeeper Vulnerability Analysis #142

Closed saurabh786123 closed 1 year ago

saurabh786123 commented 1 year ago

Hello Team,

Below vulnerabilities have been detected for zookeeper (v3.8.0) image by the vulnerability scanner.

Component: CVE-2022-2048,CVE-2022-23772,CVE-2022-28327, CVE-2022-30580,CVE-2022-30635,CVE-2021-39293,CVE-2022-32189, CVE-2021-41771, CVE-2022-30630, CVE-2021-44716, CVE-2022-23773,CVE-2022-30632, CVE-2022-27664, CVE-2022-24675, CVE-2021-41772,CVE-2022-24921, CVE-2022-30631,CVE-2022-28131, CVE-2022-30633

Can someone please help us to fix above vulnerability?.

31z4 commented 1 year ago

I recommend upgrading to 3.8.1 and re-scan. 3.8.0 is no longer maintained because it was based on completely deprecated openjdk image.