search

getredash / docker

Docker Images
16 stars 27 forks source link

Vulnerabilities in version redash/redash:10.1.0.b50633 #13

Open phillipjohnson opened 2 years ago

phillipjohnson commented 2 years ago

Trivy is reporting the following number of vulnerabilities for the version 10.1.0.b50633.

trivy image -s HIGH,CRITICAL redash/redash:10.1.0.b50633

redash/redash:10.1.0.b50633 (debian 10.11)
==========================================
Total: 194 (HIGH: 165, CRITICAL: 29)

Node.js (node-pkg)
==================
Total: 0 (HIGH: 0, CRITICAL: 0)

Python (python-pkg)
===================
Total: 9 (HIGH: 5, CRITICAL: 4)

Would it be possible to bump some of the underlying image layers in a new release to get these numbers down?

superwesman commented 2 years ago

@phillipjohnson - thanks for your comment on my related post ...

https://discuss.redash.io/t/what-to-do-about-hundreds-of-cve-reported-by-scanning-redash-container/10523

I was not aware of trivy - very cool. appreciate the tip on that too 🫡