lucee / lucee-dockerfiles

Official Lucee Dockerfiles for Docker Hub build images
https://hub.docker.com/u/lucee/
MIT License
86 stars 50 forks source link

CVEs #77

Closed VirtuallyScott closed 8 months ago

VirtuallyScott commented 1 year ago

What is the best way we start to contribute to resolving all the CVEs in Docker Containers and Lucee as a whole? The current lucee/lucee image

144 vulnerabilities found in 40 packages UNSPECIFIED 2 LOW 36 MEDIUM 29 HIGH 47 CRITICAL 30

bdw429s commented 1 year ago

@VirtuallyScott Please see this ticket: https://luceeserver.atlassian.net/browse/LDEV-4279

Most CVE's have already been addressed in Lucee 5.4 and 6.0

tomchiverton commented 8 months ago

This should be closed now.