aws / aws/aws-lambda-base-images

Unresolved vulnerabilities: ALAS2-2023-1992, ALAS2-2023-1992, ALAS2-2023-1992, ALAS2-2023-1996

Open
#86 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
777
Forks
118
PR merge metrics
No merged PRs in 30d

Description

Hi,
I am finding these unresolved vulnerabilities in the image public.ecr.aws/lambda/python:3.8.2023.04.04.12.

![image](https://user-images.githubusercontent.com/681657/230311134-ffc02b2c-91a4-47b0-966f-41ef15ef104e.png)

Please help us in fixing these.

Thanks.
Avinash.

Contributor guide

Open the contributing guide

Research direction

Start by inspecting the public.ecr.aws/lambda/python:3.8.2023.04.04.12 image and scanning it for ALAS2-2023-1992 and ALAS2-2023-1996. Confirm whether the findings are still present and identify the image or package update needed; done means the vulnerabilities are resolved or their status is clearly documented.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, docker, python
Domain
cloud, devops, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.