Repository navigation
|
While running image scanning on the latest Keycloak Image using Trivy. We came across 2 vulnerabilities- a HIGH and a CRITICAL. Regards |
Replies: 2 comments
|
@pdudani09 Hi, CVEs fixes are planned by milestones and will be available in the upcoming releases. For more information, please see our list of issues: https://github.com/keycloak/keycloak. If the CVE reported by the security scanner is not available on the list of our issues, it is recommended to create a new public GH issue. Dependencies with unpatched or unfixed vulnerabilities should be excluded from the report before submitting them. Our team recently updated most of its dependency and this should be reflected by scanning the nightly images and they should be part of upcoming releases: I hope it brings some clarity. |
@pdudani09 Hi, CVEs fixes are planned by milestones and will be available in the upcoming releases. For more information, please see our list of issues: https://github.com/keycloak/keycloak. If the CVE reported by the security scanner is not available on the list of our issues, it is recommended to create a new public GH issue. Dependencies with unpatched or unfixed vulnerabilities should be excluded from the report before submitting them.
Our team recently updated most of its dependency and this should be reflected by scanning the nightly images and they should be part of upcoming releases:
I hope it brings so…