api/package-lock.json - Trivy Report - 2026-07-27 14:03:38.267816723 +0000 UTC m=+2.013150347
npm
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
body-parser
CVE-2026-12590
LOW
2.2.2
1.20.6, 2.3.0
https://access.redhat.com/security/cve/CVE-2026-12590
https://cna.openjsf.org/security-advisories.html
https://github.com/expressjs/body-parser
https://github.com/expressjs/body-parser/commit/2322e111cc321413ec2b7b76d01be533d3de9d7d
https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac
https://github.com/expressjs/body-parser/pull/698
https://github.com/expressjs/body-parser/pull/741
https://github.com/expressjs/body-parser/releases/tag/1.20.6
https://github.com/expressjs/body-parser/releases/tag/v2.3.0
https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6
https://nvd.nist.gov/vuln/detail/CVE-2026-12590
https://www.cve.org/CVERecord?id=CVE-2026-12590
No Misconfigurations found
npm
No Vulnerabilities found
No Misconfigurations found
npm
No Vulnerabilities found
No Misconfigurations found
dockerfile
No Vulnerabilities found
Type
Misconf ID
Check
Severity
Message
Dockerfile Security Check
DS026
No HEALTHCHECK defined
LOW
Add HEALTHCHECK instruction in your Dockerfile
https://avd.aquasec.com/misconfig/ds026