[I] [Bug]: Various vulnerabilites found in v2.11.0 Docker image (hop)

Fri, 31 Jan 2025 03:19:45 -0800 


bedla opened a new issue, #4852:
URL: https://github.com/apache/hop/issues/4852

   ### Apache Hop version?
   
   2.11.0
   
   ### Java version?
   
   17 from Dockerfile
   
   ### Operating system
   
   Docker
   
   ### What happened?
   
   Hi,
   Docker Scount is reporting following vulnerabilites in Docker Image 
`apache/hop:2.11.0`.
   Are they false positives or is there plan to fix them?
   Thank you
   Ivos
   
   **CRITICAL**
   
   https://scout.docker.com/vulnerabilities/id/CVE-2023-25613
   
![Image](https://github.com/user-attachments/assets/fba8e212-6f7a-456b-89e2-211edc26dc36)
   
   **HIGH**
   
   https://scout.docker.com/vulnerabilities/id/CVE-2024-7254
   https://scout.docker.com/vulnerabilities/id/CVE-2022-3510
   https://scout.docker.com/vulnerabilities/id/CVE-2022-3509
   https://scout.docker.com/vulnerabilities/id/CVE-2021-22570
   https://scout.docker.com/vulnerabilities/id/CVE-2021-22569
   
![Image](https://github.com/user-attachments/assets/6e8d030d-b7bf-4786-90db-6586dafdb6c0)
   
   https://scout.docker.com/vulnerabilities/id/CVE-2022-41881
   https://scout.docker.com/vulnerabilities/id/CVE-2021-37136
   https://scout.docker.com/vulnerabilities/id/CVE-2019-16869
   
![Image](https://github.com/user-attachments/assets/977ce0d1-6bbd-4b74-bc2c-dec078d14ad2)
   
   https://scout.docker.com/vulnerabilities/id/CVE-2022-41881
   https://scout.docker.com/vulnerabilities/id/CVE-2021-37136
   
![Image](https://github.com/user-attachments/assets/46cc2efe-173e-455a-bf0d-f6c8a0483677)
   
   https://scout.docker.com/vulnerabilities/id/CVE-2023-43642
   https://scout.docker.com/vulnerabilities/id/CVE-2023-34455
   
![Image](https://github.com/user-attachments/assets/11d042c8-796c-42f9-95f4-a308cc3d0d3b)
   
   https://scout.docker.com/vulnerabilities/id/CVE-2023-1370
   https://scout.docker.com/vulnerabilities/id/CVE-2021-31684
   
![Image](https://github.com/user-attachments/assets/b245256b-0ed4-47d2-b544-c0579fa055bb)
   
   https://scout.docker.com/vulnerabilities/id/CVE-2023-34062
   https://scout.docker.com/vulnerabilities/id/CVE-2023-34054
   
![Image](https://github.com/user-attachments/assets/6347e376-1399-465b-82ad-a727fb587616)
   
   https://scout.docker.com/vulnerabilities/id/CVE-2020-9492
   
![Image](https://github.com/user-attachments/assets/029250c2-feb0-4152-9b60-671920499ad8)
   
   https://scout.docker.com/vulnerabilities/id/CVE-2023-34054
   
![Image](https://github.com/user-attachments/assets/54ef79d3-2cf6-4908-9179-3015d968752c)
   
   https://scout.docker.com/vulnerabilities/id/CVE-2024-25638
   
![Image](https://github.com/user-attachments/assets/d511329c-03cc-4724-9ea7-a2ac6aee174f)
   
   ### Issue Priority
   
   Priority: 3
   
   ### Issue Component
   
   Component: Containers


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to