Skip to content

Snyk Critical Vulnerability detected in conformity-template-scanner-pipeline repository #21

@vanvanis

Description

@vanvanis

Hello Team,

Their has been a Critical Vulnerability detected in conformity-template-scanner-pipeline repository through Synk agent.

Below is the Snyk Agent URL for the same:-
https://app.snyk.io/org/tabcorp2/project/bfb2533e-9c5f-4243-b9f4-13d94f769d41

This Critical Vulnerability is found from the Dockerfile created from the base image of node:14.21.0-bullseye-slim

Recommended Fix for the same is to modify the base image in this Dockerfile to node:14.21.3-bullseye-slim
This will remove the Critical Vulnerability from this repository.

Please let me know if we could make these changes to correct the same.

Thanks and Regards,
Sanjay Vanvani

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions