cancel
Showing results for 
Search instead for 
Did you mean: 

Head's Up! These forums are read-only. All users and content have migrated. Please join us at community.neo4j.com.

Vulnerabilities in latest docker image of neo4j 4.4.9

Hi ,

We are using neo4j 4.4.9 community edition for one of our projects. While scanning with the aquasec scanner, we are getting this CVE.

this CVE is associated with Java packages which have high vulnerabilities 

CVE:2022-33980- common configuration2 2.7

is it possible to update the packages for neo4j? Or is it possible to release a version/bug fix with this vulnerabilities resolution ?

 

1 REPLY 1

Hello @Karishma_1 😊

You should raise an issue here or here.

Regards,
Cobra