michelengelen opened a new issue, #8937:
URL: https://github.com/apache/devlake/issues/8937

   ### Search before asking
   
   - [x] I had searched in the 
[issues](https://github.com/apache/incubator-devlake/issues?q=is%3Aissue) and 
found no similar issues.
   
   
   ### What happened
   
   Apparently nginx in its current used version has a security vulnerability 
according to: https://www.cvedetails.com/cve/CVE-2026-49975
   
   It seems the pulled image from 
https://github.com/apache/devlake/blob/99376a8eb866f2b557dd3bc2ca26510ce241f065/config-ui/Dockerfile#L34
 is still affected
   
   Please update the nginx version to v1.29.8+ to fix the linked vulnerabilty.
   
   ### What do you expect to happen
   
   No security vulnerability
   
   ### How to reproduce
   
   -
   
   ### Anything else
   
   _No response_
   
   ### Version
   
   v1.0.3-beta10
   
   ### Are you willing to submit PR?
   
   - [ ] Yes I am willing to submit a PR!
   
   ### Code of Conduct
   
   - [x] I agree to follow this project's [Code of 
Conduct](https://www.apache.org/foundation/policies/conduct)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to