Skip to content

[container-image-scan] Container findings for node:lts-alpine #51710

Description

@github-actions

Summary

  • Image: node:lts-alpine
  • Pinned reference: node:lts-alpine@sha256:d32cdf619f63fe0471182d08996dd516c6275bb5fd31ae06e55a570bd9e1ad43
  • Vulnerabilities: 7 total (1 Critical, 6 High)
  • License violations: 29

Vulnerabilities

7 vulnerabilities (click to expand)

Licenses

29 license policy violations (click to expand)
  • libstdc++@15.2.0-r5 (GPL-2.0-or-later, LGPL-2.1-or-later)
  • alpine-baselayout-data@3.7.2-r1 (GPL-2.0-only)
  • tar@7.5.16 (BlueOak-1.0.0)
  • busybox-binsh@1.37.0-r31 (GPL-2.0-only)
  • spdx-exceptions@2.5.0 (CC-BY-3.0)
  • minipass@7.1.3 (BlueOak-1.0.0)
  • npm@11.17.0 (Artistic-2.0)
  • libgcc@15.2.0-r5 (GPL-2.0-or-later, LGPL-2.1-or-later)
  • chownr@3.0.0 (BlueOak-1.0.0)
  • lru-cache@11.5.1 (BlueOak-1.0.0)
  • spdx-license-ids@3.0.23 (CC0-1.0)
  • minimatch@10.2.5 (BlueOak-1.0.0)
  • isexe@4.0.0 (BlueOak-1.0.0)
  • apk-tools@3.0.6-r0 (GPL-2.0-only)
  • node@24.19.0 (no licenses found)
  • qrcode-terminal@0.12.0 (Apache 2.0)
  • zlib@1.3.2-r0 (Zlib)
  • busybox@1.37.0-r31 (GPL-2.0-only)
  • ca-certificates-bundle@20260611-r0 (MPL-2.0)
  • scanelf@1.3.9-r1 (GPL-2.0-only)
  • yallist@5.0.0 (BlueOak-1.0.0)
  • alpine-baselayout@3.7.2-r1 (GPL-2.0-only)
  • glob@13.0.6 (BlueOak-1.0.0)
  • common-ancestor-path@2.0.0 (BlueOak-1.0.0)
  • minipass-flush@1.0.6 (BlueOak-1.0.0)
  • libapk@3.0.6-r0 (GPL-2.0-only)
  • ssl_client@1.37.0-r31 (GPL-2.0-only)
  • path-scurry@2.0.2 (BlueOak-1.0.0)
  • musl-utils@1.2.6-r2 (GPL-2.0-or-later)

Remediation

Generated by 🛡️ Daily Container Image Security Scan · auto · 445.4 AIC · ⌖ 18.1 AIC · ⊞ 6.5K · ◷

Activity

  1. linked a pull request that will close this issueReplace vulnerable Node MCP runtime image #51769on Aug 10, 2026
  2. github-actions commented on Aug 10, 2026

    @github-actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    🍪 Om nom nom by Issue Monster · gpt54 · 2.17 AIC · ⌖ 4.21 AIC · ⊞ 10K · ◷

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Labels

cookieIssue Monster Loves Cookies!security

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions