Skip to main content
New to Testkube? Unleash the power of cloud native testing in Kubernetes with Testkube. Get Started >

bitnami-mongodb-7.0.21-2_linux_amd64

digestsha256:c347474e6488832564a6ce3d1870056f52aa4e7123bb85ce391a60c0b4ecdf18
vulnerabilitiescritical: 0 high: 1 medium: 1 low: 0
platformlinux/amd64
size237 MB
packages674
critical: 0 high: 1 medium: 0 low: 0 tar-fs 2.1.3 (npm)

pkg:npm/tar-fs@2.1.3
high 8.7: CVE--2025--59343 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected range
>=2.0.0
<2.1.4
Fixed version2.1.4
CVSS Score8.7
CVSS VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score0.066%
EPSS Percentile21st percentile
Description

Impact​

v3.1.0, v2.1.3, v1.16.5 and below

Patches​

Has been patched in 3.1.1, 2.1.4, and 1.16.6

Workarounds​

You can use the ignore option to ignore non files/directories.

  ignore (_, header) {
    // pass files & directories, ignore e.g. symlinks
    return header.type !== 'file' && header.type !== 'directory'
  }

Credit​

Reported by: Mapta / BugBunny_ai

critical: 0 high: 0 medium: 1 low: 0 stdlib 1.24.4 (golang)

pkg:golang/stdlib@1.24.4
medium : CVE--2025--47906

Affected range
>=1.24.0
<1.24.6
Fixed version1.24.6
EPSS Score0.022%
EPSS Percentile4th percentile
Description

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.