New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2023-36414 vulnerability in V4 images #1004

Open

halyssonfreitas opened this issue Nov 16, 2023 · 0 comments

halyssonfreitas commented Nov 16, 2023

I have found a vulnerability in some images of V4 Docker Azure Function.

This is because some packages are outdated. The tool to find it to me was Qualys inside Azure Advisor.

For one project using mcr.microsoft.com/azure-functions/node:4-node18 or mcr.microsoft.com/azure-functions/node:4-nightly-node18 the issues are:

For other project using mcr.microsoft.com/dotnet/sdk:6.0 the issues are:

The same CVE issue was found by #994 using mcr.microsoft.com/azure-functions/dotnet:4-slim .

Please, how to solve it?

hctan mentioned this issue

CVE-2024-0056 vulnerability in dotnet v4 image #1029

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment