Questions about mongodb container image cves

Lavanya_Nutakki · 2022-12-03T08:42:49.238Z

Hi

I have a question about security vulnerabilities (cves) with mongodb container images.

We are seeing cves (file attached) with some components of mongodb that are packaged into container image. Just want to check with the community and get some inputs on how evey one else is remediating these vulnerabilities. Our scanning tool is a combination of generating SBOM and then running it via OWasp Dependency-Track.

chris · 2022-12-05T02:24:08.115Z

The Docker community is the party responsible for the mongodb containers.

GitHub

GitHub - docker-library/mongo: Docker Official Image packaging for MongoDB

Docker Official Image packaging for MongoDB. Contribute to docker-library/mongo development by creating an account on GitHub.

I see you have already raised an issue there.

system · 2023-01-18T11:47:25.591Z

This topic was automatically closed 5 days after the last reply. New replies are no longer allowed.