馃毃 Security Scan Alert
A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.
- Image:
ghcr.io/stacklok/dockyard/npx/astra-db-mcp:1.2.2
- Critical vulnerabilities: 0
- High vulnerabilities: 5
Details
See the Security tab for full details.
High Vulnerabilities
- GHSA-j4fx-xxwh-2485 in
jsondiffpatch@0.6.0: jsondiffpatch patch APIs are vulnerable to prototype pollution
- GHSA-5jgf-p345-68v8 in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
- GHSA-jqff-g426-hqxp in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via percent-encoded scheme normalization
- GHSA-f65p-4m7j-42xc in
fast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
- GHSA-fph4-wmhf-6fwf in
fast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
Automated security scan from periodic-security-scan workflow
馃毃 Security Scan Alert
A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.
ghcr.io/stacklok/dockyard/npx/astra-db-mcp:1.2.2Details
See the Security tab for full details.
High Vulnerabilities
jsondiffpatch@0.6.0: jsondiffpatch patch APIs are vulnerable to prototype pollutionfast-uri@3.1.5: fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative referencesfast-uri@3.1.5: fast-uri vulnerable to host confusion via percent-encoded scheme normalizationfast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via malformed IPv6 normalizationfast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via repeated hostname percent-decodingAutomated security scan from periodic-security-scan workflow