Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cve-2022-25881errorfound from image due to node.js version #6776

Closed
ApoorvaKamath-28 opened this issue Mar 17, 2023 · 1 comment
Closed

cve-2022-25881errorfound from image due to node.js version #6776

ApoorvaKamath-28 opened this issue Mar 17, 2023 · 1 comment
Labels
bug status:Needs Triage Applied to issues that need triage

Comments

@ApoorvaKamath-28
Copy link

ApoorvaKamath-28 commented Mar 17, 2023

Describe the bug
node.js version needs to be updated, cve-2022-25881 defect found during trivy scan.

To Reproduce
Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • OS: [e.g. iOS]
  • Browser [e.g. chrome, safari]
  • Version [e.g. 22]

Additional context
Add any other context about the problem here.

@jupyterlab-probot jupyterlab-probot bot added the status:Needs Triage Applied to issues that need triage label Mar 17, 2023
@RRosio
Copy link
Collaborator

RRosio commented Mar 28, 2023

Hi @ApoorvaKamath-28, according to the documentation on the Jupyter.org/security website please use this process to report a security vulnerability:
"If you believe you’ve found a security vulnerability in a Jupyter Subproject, please report it to [email protected]. If you prefer to encrypt your security reports, you can use this PGP public key."

@RRosio RRosio closed this as completed Mar 28, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Mar 28, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug status:Needs Triage Applied to issues that need triage
Projects
None yet
Development

No branches or pull requests

2 participants