Repository navigation
🚨 Security: Critical or high vulnerabilities in astra-db-mcp container #949
Description
Activity
Updated Scan Results
🚨 Security Scan Alert
A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.
- Image:
ghcr.io/stacklok/dockyard/npx/astra-db-mcp:1.2.2 - Critical vulnerabilities: 0
- High vulnerabilities: 5
Details
See the Security tab for full details.
High Vulnerabilities
- GHSA-j4fx-xxwh-2485 in
jsondiffpatch@0.6.0: jsondiffpatch patch APIs are vulnerable to prototype pollution - GHSA-5jgf-p345-68v8 in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references - GHSA-jqff-g426-hqxp in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via percent-encoded scheme normalization - GHSA-f65p-4m7j-42xc in
fast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization - GHSA-fph4-wmhf-6fwf in
fast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
Automated security scan from periodic-security-scan workflow
- Image:
Updated Scan Results
🚨 Security Scan Alert
A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.
- Image:
ghcr.io/stacklok/dockyard/npx/astra-db-mcp:1.2.2 - Critical vulnerabilities: 0
- High vulnerabilities: 5
Details
See the Security tab for full details.
High Vulnerabilities
- GHSA-j4fx-xxwh-2485 in
jsondiffpatch@0.6.0: jsondiffpatch patch APIs are vulnerable to prototype pollution - GHSA-5jgf-p345-68v8 in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references - GHSA-jqff-g426-hqxp in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via percent-encoded scheme normalization - GHSA-f65p-4m7j-42xc in
fast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization - GHSA-fph4-wmhf-6fwf in
fast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
Automated security scan from periodic-security-scan workflow
- Image:
Updated Scan Results
🚨 Security Scan Alert
A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.
- Image:
ghcr.io/stacklok/dockyard/npx/astra-db-mcp:1.2.2 - Critical vulnerabilities: 0
- High vulnerabilities: 5
Details
See the Security tab for full details.
High Vulnerabilities
- GHSA-j4fx-xxwh-2485 in
jsondiffpatch@0.6.0: jsondiffpatch patch APIs are vulnerable to prototype pollution - GHSA-5jgf-p345-68v8 in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references - GHSA-jqff-g426-hqxp in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via percent-encoded scheme normalization - GHSA-f65p-4m7j-42xc in
fast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization - GHSA-fph4-wmhf-6fwf in
fast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
Automated security scan from periodic-security-scan workflow
- Image:
Updated Scan Results
🚨 Security Scan Alert
A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.
- Image:
ghcr.io/stacklok/dockyard/npx/astra-db-mcp:1.2.2 - Critical vulnerabilities: 0
- High vulnerabilities: 7
Details
See the Security tab for full details.
High Vulnerabilities
- GHSA-j4fx-xxwh-2485 in
jsondiffpatch@0.6.0: jsondiffpatch patch APIs are vulnerable to prototype pollution - GHSA-5jgf-p345-68v8 in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references - GHSA-rfgv-xxqx-mfg5 in
undici@6.28.0: undici vulnerable to Denial of Service via unrequested WebSocket subprotocol - GHSA-qw65-cvwx-89v3 in
fast-uri@3.1.5: fast-uri vulnerable to authority injection via an unvalidated port in serialize - GHSA-jqff-g426-hqxp in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via percent-encoded scheme normalization
... and 2 more. See Security tab for complete list.
Automated security scan from periodic-security-scan workflow
- Image:
🚨 Security Scan Alert
A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.
ghcr.io/stacklok/dockyard/npx/astra-db-mcp:1.2.2Details
See the Security tab for full details.
High Vulnerabilities
jsondiffpatch@0.6.0: jsondiffpatch patch APIs are vulnerable to prototype pollutionfast-uri@3.1.5: fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative referencesfast-uri@3.1.5: fast-uri vulnerable to host confusion via percent-encoded scheme normalizationfast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via malformed IPv6 normalizationfast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via repeated hostname percent-decodingAutomated security scan from periodic-security-scan workflow