Based on the latest trivy vulnerability scan here. There is one remaining vulnerability that needs to be fixed on carbon-accounting-backend after using the version @2.0.0-alpha.1.
http-cache-semantics (package.json)
Regular Expression Denial of Service (ReDoS) vulnerability|
https://avd.aquasec.com/nvd/cve-2022-25881
Package: carbon-accounting-backend
Installed Version: 4.1.0
Fixed Version: 4.1.1
Based on the latest trivy vulnerability scan here. There is one remaining vulnerability that needs to be fixed on carbon-accounting-backend after using the version @2.0.0-alpha.1.
http-cache-semantics (package.json) Regular Expression Denial of Service (ReDoS) vulnerability| https://avd.aquasec.com/nvd/cve-2022-25881 Package: carbon-accounting-backend Installed Version: 4.1.0 Fixed Version: 4.1.1