docker.io/library/node:lts-alpine (alpine 3.24.1)

Trivy Image Scan

• Image: docker.io/library/node:lts-alpine (alpine 3.24.1)
• Scan date: 2026-06-21

docker.io/library/node:lts-alpine (alpine 3.24.1) (alpine)

No Vulnerabilities found
No Misconfigurations found

Node.js (node-pkg)

Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
brace-expansion	CVE-2026-45149	MEDIUM	5.0.5	5.0.6	https://access.redhat.com/security/cve/CVE-2026-45149 https://github.com/juliangruber/brace-expansion https://github.com/juliangruber/brace-expansion/commit/c0b095bdc52bc4c36dc88deddbadabc49f8371e5 https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-jxxr-4gwj-5jf2 https://nvd.nist.gov/vuln/detail/CVE-2026-45149 https://www.cve.org/CVERecord?id=CVE-2026-45149
ip-address	CVE-2026-42338	MEDIUM	10.1.0	10.1.1	https://access.redhat.com/security/cve/CVE-2026-42338 https://github.com/beaugunderson/ip-address https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g https://nvd.nist.gov/vuln/detail/CVE-2026-42338 https://www.cve.org/CVERecord?id=CVE-2026-42338
tar	CVE-2026-53655	MEDIUM	7.5.13	7.5.16	https://github.com/isaacs/node-tar https://github.com/isaacs/node-tar/security/advisories/GHSA-vmf3-w455-68vh
undici	CVE-2026-12151	HIGH	6.25.0	6.27.0, 7.28.0, 8.5.0	https://access.redhat.com/security/cve/CVE-2026-12151 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q https://nvd.nist.gov/vuln/detail/CVE-2026-12151 https://www.cve.org/CVERecord?id=CVE-2026-12151
undici	CVE-2026-9679	MEDIUM	6.25.0	6.27.0, 7.28.0, 8.5.0	https://access.redhat.com/security/cve/CVE-2026-9679 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici https://github.com/nodejs/undici/security/advisories/GHSA-p88m-4jfj-68fv https://nvd.nist.gov/vuln/detail/CVE-2026-9679 https://www.cve.org/CVERecord?id=CVE-2026-9679
undici	CVE-2026-11525	LOW	6.25.0	6.27.0, 7.28.0, 8.5.0	https://access.redhat.com/security/cve/CVE-2026-11525 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici https://github.com/nodejs/undici/security/advisories/GHSA-g8m3-5g58-fq7m https://nvd.nist.gov/vuln/detail/CVE-2026-11525 https://www.cve.org/CVERecord?id=CVE-2026-11525
undici	CVE-2026-6733	LOW	6.25.0	6.27.0, 7.28.0, 8.5.0	https://access.redhat.com/security/cve/CVE-2026-6733 https://cna.openjsf.org/security-advisories.html https://github.com/nodejs/undici https://github.com/nodejs/undici/security/advisories/GHSA-35p6-xmwp-9g52 https://hackerone.com/reports/3582376 https://nvd.nist.gov/vuln/detail/CVE-2026-6733 https://www.cve.org/CVERecord?id=CVE-2026-6733
No Misconfigurations found