-
Notifications
You must be signed in to change notification settings - Fork 187
Open
Labels
bugSomething isn't workingSomething isn't working
Description
Describe the bug
Even the latest chart version 4.35.10 is based on a relatively older version on alpine image 3.0.8 which includes the libssl related vulnerability CVE-2025-15467
To Reproduce
Steps to reproduce the behavior:
- Well you can either scan the deployed container with any of the security scanner.
- Or you can run the following command
docker run --rm public.ecr.aws/docker/library/haproxy:3.0.8-alpine apk info -vv | grep sslto check the actual versions of libssl libraries and then check the CVE details here
Expected behavior
The container should have this vulnerability fixed
Additional context
There are newer versions of alipine linux, which already have this CVE fixed, for example this one (to stick with the current minor version) public.ecr.aws/docker/library/haproxy:3.0.18-alpine. I have already scanned it and it has 3.5.5-r0 which is fixed version according to alpine webpage
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working