Known CVE's in current docker image

ankane / pghero

A performance dashboard for Postgres

MIT License

8.01k stars 447 forks source link

Closed hiddevdm closed 2 months ago

hiddevdm commented 2 months ago

Hi there, our CVE scanner detects the following CVE's in the current docker image:

CVE-2024-28103

Upgrade package actionpack to version 6.1.7.8,7.0.8.4,7.1.3.4,7.2.0.beta2 or above.
Upgrade package rails to version 6.1.7.8,7.0.8.4,7.1.3.4 or above.

CVE-2023-22796

CVE-2023-42366

Could a patch be released with upgraded versions?

ankane commented 2 months ago

Hi @hiddevdm, pushed a new image to the latest tag (but none of these seem to affect PgHero).