Repository navigation
[AW Top 10] 02 Burn down container image CVE findings #69880
Description
Priority 2/10 | 9 source issues | Impact 3/5 | Confidence 3/5 | Effort 3/5
One assignment, one coherent fix
The container image scan opens separate burn-down issues for firewall, gateway, MCP server, node, grafana, router, Serena and xberg images.
Implementation scope
Update base images and pinned dependencies for each scanned image, rebuild, and rescan to confirm the critical and high findings clear.
Done when
- The next scan shows no critical or high CVEs with available fixes.
- Duplicate burn-down issues are consolidated.
Why now
Images ship to users, so findings matter, but some CVEs may lack upstream fixes.
AW source issues and corroborating reports
#68340 #68341 #68342 #68344 #68346 #68347 #68975 #68976 #69275
No corroborating AW discussion; evidence comes from the source issues.
Unchanged AW sources close only after this summary is completed. Newer source activity and not-planned retirement do not trigger source closure. Assigned summaries are frozen; unassign to allow reclustering.
Generated by AW Essential Issue Clustering · copilot · auto · 21.6 AIC · ⌖ 0.616 AIC · ⊞ 8.9K · ◷
Activity
fix: clear fixable Node image CVEs and correct burn-down tracking (#7…
[-][AW Top 10] 04 Burn down container image CVE findings[/-][+][AW Top 10] 03 Burn down container image CVE findings[/+][-][AW Top 10] 03 Burn down container image CVE findings[/-][+][AW Top 10] 02 Burn down container image CVE findings[/+]