🚨 Security: Critical or high vulnerabilities in pinecone-mcp container
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 52/100
Research direction
Start with the periodic-security-scan workflow and the Security tab findings for the pinecone-mcp image. Trace where fast-uri@3.1.5 enters ghcr.io/stacklok/dockyard/npx/pinecone-mcp:0.3.0, then update the relevant dependency or image input. Done means the scan reports no high vulnerabilities and the build workflow can publish the image.
Written by the indexing model from the issue text.
Description
🚨 Security Scan Alert
A periodic security scan found fixable critical or high severity vulnerabilities in the container image. Findings at this level also block publishing in the build workflow.
- Image:
ghcr.io/stacklok/dockyard/npx/pinecone-mcp:0.3.0 - Critical vulnerabilities: 0
- High vulnerabilities: 4
Details
See the Security tab for full details.
High Vulnerabilities
- GHSA-5jgf-p345-68v8 in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references - GHSA-jqff-g426-hqxp in
fast-uri@3.1.5: fast-uri vulnerable to host confusion via percent-encoded scheme normalization - GHSA-f65p-4m7j-42xc in
fast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization - GHSA-fph4-wmhf-6fwf in
fast-uri@3.1.5: fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
Automated security scan from periodic-security-scan workflow
- Dominant language
- Go
- Stars
- 8
- Forks
- 7
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 62
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from stacklok/dockyard
-
grype high security
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
grype high security
Difficulty 2/5 1-3 hours Newbie friendliness 55/100
-
grype high security
Difficulty 3/5 1-2 days Newbie friendliness 62/100
-
grype high security
Difficulty 3/5 1-2 days Newbie friendliness 55/100
-
grype high security
Difficulty 3/5 1-2 days Newbie friendliness 50/100
All issues in stacklok/dockyard
Similar issues
-
kind/bug needs-triage
Difficulty 1/5 Under an hour Newbie friendliness 72/100
matrixorigin/matrixone#29223 ·
-
needs-acceptance wg/data-plane-networking
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
vllm-project/semantic-router#4024 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
alexgorbatchev/dotfiles#107 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 84/100