search

alpinelinux / docker-alpine

Official Alpine Linux Docker image. Win at minimalism!
MIT License
1.04k stars 261 forks source link

Security Vulnerability with node:18.9.0-alpine3.16 #279

Open subhankarc opened 1 year ago

subhankarc commented 1 year ago

Environment Image Tag: node:18.9.0-alpine3.16 Current Behavior Scans reveal that the current image has the following vulnerabilities.

https://nvd.nist.gov/vuln/detail/CVE-2018-25032 https://nvd.nist.gov/vuln/detail/CVE-2022-37434

Is there a plan to mitigate these ?

I also see https://github.com/alpinelinux/docker-alpine/issues/244 states that the issue is not more there in the latest version, but we still see it in the image mentioned.

Also, https://github.com/alpinelinux/docker-alpine/issues/276 says that the issue CVE-2022-37434 is mitigated but we still get the same.

Neustradamus commented 1 year ago

@madler has done the new build, the 1.2.13 has been released with the CVE-2022-37434 fix.