api/package-lock.json - Trivy Report - 2026-10-12 19:05:43.2138898 +0000 UTC m=+6.601290284
npm
Package
Vulnerability ID
Severity
Installed Version
Fixed Version
Links
proxy-addr
CVE-2026-90711
CRITICAL
2.0.7
2.0.8
https://access.redhat.com/security/cve/CVE-2026-90711
https://advisory.echohq.com/cve/CVE-2026-90711
https://cna.openjsf.org/security-advisories.html
https://github.com/jshttp/proxy-addr
https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965
https://github.com/jshttp/proxy-addr/releases/tag/v2.0.8
https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h
https://nvd.nist.gov/vuln/detail/CVE-2026-90711
https://www.cve.org/CVERecord?id=CVE-2026-90711
qs
CVE-2026-82417
MEDIUM
6.15.2
6.16.0
https://access.redhat.com/security/cve/CVE-2026-82417
https://advisory.echohq.com/cve/CVE-2026-82417
https://github.com/ljharb/qs
https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6
https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g
https://nvd.nist.gov/vuln/detail/CVE-2026-82417
https://www.cve.org/CVERecord?id=CVE-2026-82417
qs
CVE-2026-82562
MEDIUM
6.15.2
6.16.0
https://access.redhat.com/security/cve/CVE-2026-82562
https://advisory.echohq.com/cve/CVE-2026-82562
https://github.com/ljharb/qs
https://github.com/ljharb/qs/commit/8859c37470e11b42b547b275e4e9bd0bc8cc5464
https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883
https://github.com/ljharb/qs/security/advisories/GHSA-x5fp-wj9c-mxmx
https://nvd.nist.gov/vuln/detail/CVE-2026-82562
https://www.cve.org/CVERecord?id=CVE-2026-82562
No Misconfigurations found
npm
No Vulnerabilities found
No Misconfigurations found
npm
No Vulnerabilities found
No Misconfigurations found
npm
No Vulnerabilities found
No Misconfigurations found
dockerfile
No Vulnerabilities found
Type
Misconf ID
Check
Severity
Message
Dockerfile Security Check
DS026
No HEALTHCHECK defined
LOW
Add HEALTHCHECK instruction in your Dockerfile
https://avd.aquasec.com/misconfig/ds026