CVE-2025-4673 vulnerability in image of coredns for 1.32 eks version
Open
EKS
- Dominant language
- Shell
- Stars
- 5.4k
- Forks
- 334
- PR merge metrics
- No merged PRs in 30d
Description
image: eks/coredns:v1.11.4-eksbuild.14
4H and 3M vulnerabilities in coredns image
Also unable to docker pull latest image -
public.ecr.aws/eks/coredns:v1.11.4-eksbuild.22
Description: Our security scans detected a high and medium vulnerability in these above mentioned image
Could we have an estimate on the plan to fix these vulnerabilities? Thanks in advance!
Contributor guide
Research direction
Start by checking the listed eks/coredns:v1.11.4-eksbuild.14 image, CVE-2025-4673, and the reported public.ecr.aws/eks/coredns:v1.11.4-eksbuild.22 pull failure. Done should be defined as a documented remediation plan or a corrected, pullable image with the reported vulnerabilities addressed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, docker, kubernetes
- Domain
- cloud, infrastructure, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 18/100