24
Vulnerabilities on Dockerhub (lemmy.ml)
submitted 1 month ago by to c/selfhosted@lemmy.world
8 comments fedilink hide all child comments
 

Apologies if this is a rookie question, but I keep wondering what the vulnerabilities section on DockerHub is trying to tell me. Take nextcloud images for instance: The most current images seem to list 3 critical and 22 severe vulnerabilities. Does that mean those vulns are part of the image? If so, why would anyone want to run this?

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 month ago

Generally the images will be built with dependencies that have known issues but not all cves are actual problems.

Just because Next cloud uses a package, it may not use the function that has the issue.

  • permalink
  • fedilink
  • source
    •