Skip to main content
New to Testkube? Unleash the power of cloud native testing in Kubernetes with Testkube. Get Started >

bitnami-mongodb-7.0.21-2_linux_arm64

digestsha256:7fb0267e07ee112bfe0f40843dfdb69a569d6ff036b3b58297cde0543880a820
vulnerabilitiescritical: 0 high: 1 medium: 1 low: 0
platformlinux/arm64
size230 MB
packages674
critical: 0 high: 1 medium: 0 low: 0 tar-fs 2.1.3 (npm)

pkg:npm/tar-fs@2.1.3
high 8.7: CVE--2025--59343 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected range
>=2.0.0
<2.1.4
Fixed version2.1.4
CVSS Score8.7
CVSS VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score0.066%
EPSS Percentile21st percentile
Description

Impact​

v3.1.0, v2.1.3, v1.16.5 and below

Patches​

Has been patched in 3.1.1, 2.1.4, and 1.16.6

Workarounds​

You can use the ignore option to ignore non files/directories.

  ignore (_, header) {
    // pass files & directories, ignore e.g. symlinks
    return header.type !== 'file' && header.type !== 'directory'
  }

Credit​

Reported by: Mapta / BugBunny_ai

critical: 0 high: 0 medium: 1 low: 0 stdlib 1.24.4 (golang)

pkg:golang/stdlib@1.24.4
medium : CVE--2025--47906

Affected range
>=1.24.0
<1.24.6
Fixed version1.24.6
EPSS Score0.022%
EPSS Percentile4th percentile
Description

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.