Hey I'm getting many vulnerability alerts in my pipeline when running the base casdoor image (casbin/casdoor:v1.919.0), is there any recurrent dependency update to fix this issues?
(running security check with trivy)
what alerts do you get?
You can send the alerts to admin@casdoor.org if feel sensitive
It's pretty easy to check it yourself with docker:
docker run aquasec/trivy image casbin/casdoor:v1.924.0
docker run aquasec/trivy image casbin/casdoor-all-in-one:v1.924.0
The most of the stuff are just missing dependency updates. The most of them are just patch updates so it shouldn't be breaking changes...
sent to this email
@alphyron this issue has been fixed: https://github.com/casdoor/casdoor/pull/3855
Join the conversation
Sign up to reply, like and follow topics.
Suggested Topics
Want to read more? Browse other topics in Casdoor or view latest topics.
1 / 5
May 2025
This forum runs on Casnode, an open-source forum with the look and features of Discourse, built with Go and Next.js. See what it can do on the Casnode demo site.
Try the Casnode demo