-
Notifications
You must be signed in to change notification settings - Fork 469
Open
Labels
Component: DockerPriority: CriticalBroken behavior in nearly all environments, e.g. wrong test results, internal bats errorBroken behavior in nearly all environments, e.g. wrong test results, internal bats errorSize: SmallChanges to a few localized lines of code (e.g. same function)Changes to a few localized lines of code (e.g. same function)Status: ConfirmedThe reproducer worked as describedThe reproducer worked as describedType: Bug
Description
Describe the bug
The 1.13.0 Docker image has multiple vulnerabilities including the critical CVE-2025-15467.
The vulnerabilities lie with the OS dependencies. I checked out v1.13.0 tag and built a custom image and it did not have any vulnerabilities. But it's difficult to use the custom tag in our code and an official image would be preferred. Can a v1.13.1 image be created that should pull in the latest OS dependency fixes automatically?
To Reproduce
Steps to reproduce the behavior:
- Use a vulnerability scanner to scan 1.13.0 image
Expected behavior
No major vulnerabilities in published image.
Environment (please complete the following information):
- Bats version 1.13.0
- operating system (including version): MacOS
bash --version: N/A- Install method: Docker
Additional context
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Component: DockerPriority: CriticalBroken behavior in nearly all environments, e.g. wrong test results, internal bats errorBroken behavior in nearly all environments, e.g. wrong test results, internal bats errorSize: SmallChanges to a few localized lines of code (e.g. same function)Changes to a few localized lines of code (e.g. same function)Status: ConfirmedThe reproducer worked as describedThe reproducer worked as describedType: Bug