Vulnerability CVE-2024-21538

[rafik43]

Hi, we are getting flagged for CVE-2024-21538 vulnerability.

We are using the image - mcr.microsoft.com/cbl-mariner/base/nodejs:18

Could you please provide an estimated timeline for the fix?

[jperrin]

When was the last time you pulled a new version of the container?

This CVE was patched in ce9f875 and the updated container was published a few days ago. I suspect this is just a timing issue.

[rafik43]

I just pulled latest image and I still see the vulnerability.