Closed vovtz closed 1 year ago
Please see: https://github.com/docker-library/faq#why-does-my-security-scanner-show-that-an-image-has-cves
My understanding is that the issue only affects the Postgres server, not the client. Thus it does not apply to this image / is a false positive. In any case the update should be applied when the image is rebuilt the next time which I don't control.
/cc @tianon
Scanning the container image with Snyk reveals that
postgresql14/libpq
has a High Severity vulnerability: