Docker base image has open vulnerabilities

The version of Alpine that was incorporated into the latest Docker image for Chisel has several known vulnerabilities associated with it. I've already confirmed that rebuilding the image pulls in the latest version of Alpine that addresses these, but I was wondering if there are any plans to build and publish a new version of the image for Chisel 1.7.7.

Here are the scan results for the latest image for reference:

➜ chisel git:(master) docker scan jpillora/chisel

Testing jpillora/chisel...

✗ Low severity vulnerability found in busybox/busybox
Description: ALPINE-13661
Info: https://snyk.io/vuln/SNYK-ALPINE315-BUSYBOX-2606932
Introduced through: busybox/busybox@1.34.1-r3, alpine-baselayout/alpine-baselayout@3.2.0-r18, ca-certificates/ca-certificates@20211220-r0, busybox/ssl_client@1.34.1-r3
From: busybox/busybox@1.34.1-r3
From: alpine-baselayout/alpine-baselayout@3.2.0-r18 > busybox/busybox@1.34.1-r3
From: ca-certificates/ca-certificates@20211220-r0 > busybox/busybox@1.34.1-r3
and 1 more...
Image layer: 'apk add --no-cache ca-certificates'
Fixed in: 1.34.1-r5

✗ High severity vulnerability found in zlib/zlib
Description: Out-of-bounds Write
Info: https://snyk.io/vuln/SNYK-ALPINE315-ZLIB-2434420
Introduced through: zlib/zlib@1.2.11-r3, apk-tools/apk-tools@2.12.7-r3
From: zlib/zlib@1.2.11-r3
From: apk-tools/apk-tools@2.12.7-r3 > zlib/zlib@1.2.11-r3
Image layer: Introduced by your base image (alpine:3.15.0)
Fixed in: 1.2.12-r0

✗ High severity vulnerability found in openssl/libcrypto1.1
Description: Loop with Unreachable Exit Condition ('Infinite Loop')
Info: https://snyk.io/vuln/SNYK-ALPINE315-OPENSSL-2426331
Introduced through: openssl/libcrypto1.1@1.1.1l-r7, openssl/libssl1.1@1.1.1l-r7, apk-tools/apk-tools@2.12.7-r3, libretls/libretls@3.3.4-r2, ca-certificates/ca-certificates@20211220-r0
From: openssl/libcrypto1.1@1.1.1l-r7
From: openssl/libssl1.1@1.1.1l-r7 > openssl/libcrypto1.1@1.1.1l-r7
From: apk-tools/apk-tools@2.12.7-r3 > openssl/libcrypto1.1@1.1.1l-r7
and 5 more...
Image layer: 'apk add --no-cache ca-certificates'
Fixed in: 1.1.1n-r0

✗ High severity vulnerability found in libretls/libretls
Description: Loop with Unreachable Exit Condition ('Infinite Loop')
Info: https://snyk.io/vuln/SNYK-ALPINE315-LIBRETLS-2428776
Introduced through: libretls/libretls@3.3.4-r2, busybox/ssl_client@1.34.1-r3
From: libretls/libretls@3.3.4-r2
From: busybox/ssl_client@1.34.1-r3 > libretls/libretls@3.3.4-r2
Image layer: Introduced by your base image (alpine:3.15.0)
Fixed in: 3.3.4-r3

✗ Critical severity vulnerability found in busybox/busybox
Description: CVE-2022-28391
Info: https://snyk.io/vuln/SNYK-ALPINE315-BUSYBOX-2440607
Introduced through: busybox/busybox@1.34.1-r3, alpine-baselayout/alpine-baselayout@3.2.0-r18, ca-certificates/ca-certificates@20211220-r0, busybox/ssl_client@1.34.1-r3
From: busybox/busybox@1.34.1-r3
From: alpine-baselayout/alpine-baselayout@3.2.0-r18 > busybox/busybox@1.34.1-r3
From: ca-certificates/ca-certificates@20211220-r0 > busybox/busybox@1.34.1-r3
and 1 more...
Image layer: 'apk add --no-cache ca-certificates'
Fixed in: 1.34.1-r5

Package manager: apk
Project name: docker-image|jpillora/chisel
Docker image: jpillora/chisel
Platform: linux/amd64
Base image: alpine:3.15.0

Tested 15 dependencies for known vulnerabilities, found 5 vulnerabilities.

Base Image Vulnerabilities Severity
alpine:3.15.0 5 1 critical, 3 high, 0 medium, 1 low

Recommendations for base image upgrade:

Minor upgrades
Base Image Vulnerabilities Severity
alpine:latest 0 0 critical, 0 high, 0 medium, 0 low

Start by locating the Docker build definition for the Chisel image and confirm how the Alpine base image is selected and published. Rebuild the Chisel 1.7.7 image, run the reported docker scan against it, and verify that the listed Alpine vulnerabilities are resolved before publishing.