windmill
windmill copied to clipboard
[Snyk] Security upgrade python from 3.11-slim to 3.14.0a1-slim
Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.
Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.
Snyk changed the following file(s):
lsp/Dockerfile
We recommend upgrading to python:3.14.0a1-slim, as this image has only 34 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.
Vulnerabilities that will be fixed with an upgrade:
| Issue | Score | |
|---|---|---|
| Integer Overflow or Wraparound SNYK-DEBIAN12-ZLIB-6008963 |
500 | |
| CVE-2024-26458 SNYK-DEBIAN12-KRB5-6277412 |
150 | |
| CVE-2024-26462 SNYK-DEBIAN12-KRB5-6277421 |
150 | |
| CVE-2024-56433 SNYK-DEBIAN12-SHADOW-8551160 |
150 | |
| CVE-2024-56433 SNYK-DEBIAN12-SHADOW-8551160 |
150 |
[!IMPORTANT]
- Check the changes in this PR to ensure they won't cause issues with your project.
- Max score is 1000. Note that the real score may have changed since the PR was raised.
- This PR was automatically created by Snyk using the credentials of a real user.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.
[!IMPORTANT] Upgrade
lsp/Dockerfilebase image topython:3.14.0a1-slimto fix security vulnerabilities.
- Dockerfile Update:
- Upgrade base image in
lsp/Dockerfilefrompython:3.11-slimtopython:3.14.0a1-slimto address 4 security vulnerabilities.- New base image reduces known vulnerabilities to 34.
This description was created by
for 2cfa53a14a34d1941937c8d6fadb330f7691d90e. It will automatically update as commits are pushed.