resolve apk-tools CVE with alpine update

Open nathanlaceyraft opened this issue 9 months ago • 0 comments

trivy image --scanners vuln edenhill/kcat:1.7.1 shows the following cve

apk-tools │ CVE-2021-36159 │ CRITICAL │ fixed │ 2.10.6-r0 │ 2.10.7-r0 │ libfetch: an out of boundary read while libfetch uses strtol to parse... https://avd.aquasec.com/nvd/cve-2021-36159

Resolve CVE by updating alpine base image

Apr 16 '25 15:04 nathanlaceyraft