Vulnerability Scan Report for registry.suse.com/bci/nodejs:20-31.11
Node.js 20 development container based on the SLE Base Container Image.
registry.suse.com/bci/nodejs:20-31.11
Last scanned on: July 07, 2025 04:22
Node.js 20 development container based on the SLE Base Container Image.
Last scanned on: July 07, 2025 04:22
| Package Name | Severity | Status | Description | Reference links | |
|---|---|---|---|---|---|
| libexpat1 | MEDIUM | fixed |
Security update for expat Vulnerability ID: SUSE-SU-2024:4035-1 Installed Version: 2.4.4-150400.3.17.1 Fixed Version: 2.4.4-150400.3.25.1 This update for expat fixes the following issues: - CVE-2024-50602: Fixed a denial of service via XML_ResumeParser (bsc#1232579). |
||
| libfa1 | LOW | fixed |
Security update for augeas Vulnerability ID: SUSE-SU-2025:1534-1 Installed Version: 1.14.1-150600.1.3 Fixed Version: 1.14.1-150600.3.3.1 This update for augeas fixes the following issues: - CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909) |
||
| libglib-2_0-0 | HIGH | fixed |
Security update for glib2 Vulnerability ID: SUSE-SU-2024:4254-1 Installed Version: 2.78.6-150600.4.3.1 Fixed Version: 2.78.6-150600.4.8.1 This update for glib2 fixes the following issues: Security issues fixed: - CVE-2024-52533: Fix a single byte buffer overflow in set_connect_msg() (bsc#1233282). Non-security issue fixed: - Fix error when uninstalling packages (bsc#1231463). |
||
| libglib-2_0-0 | HIGH | fixed |
Security update for glib2 Vulnerability ID: SUSE-SU-2025:02167-1 Installed Version: 2.78.6-150600.4.3.1 Fixed Version: 2.78.6-150600.4.16.1 This update for glib2 fixes the following issues: - CVE-2025-6052: Fixed integer overflow in g_string_maybe_expand() leads to potential buffer overflow in GString (bsc#1244596). - CVE-2025-4373: Fixed buffer underflow through glib/gstring.c via function g_string_insert_unichar (bsc#1242844). |
||
| libglib-2_0-0 | MEDIUM | fixed |
Security update for glib2 Vulnerability ID: SUSE-SU-2025:1367-1 Installed Version: 2.78.6-150600.4.3.1 Fixed Version: 2.78.6-150600.4.11.1 This update for glib2 fixes the following issues: - CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with g_date_time_new_from_iso8601() (bsc#1240897) |
||