# Snyk test report

June 9th 2024, 12:25:11 am (UTC+00:00)

Scanned the following paths:

- redis:7.0.15-alpine (apk)
- redis:7.0.15-alpine/tianon/gosu//usr/local/bin/gosu (gomodules)

1 known vulnerabilities
9 vulnerable dependency paths
18 dependencies

## CVE-2024-4741

low severity

- Package Manager: alpine:3.20
- Vulnerable module: openssl/libcrypto3
- Introduced through: docker-image|redis@7.0.15-alpine and openssl/libcrypto3@3.3.0-r2

### Detailed paths

- Introduced through: docker-image|redis@7.0.15-alpine › openssl/libcrypto3@3.3.0-r2
- Introduced through: docker-image|redis@7.0.15-alpine › .redis-rundeps@20240524.005525 › openssl/libcrypto3@3.3.0-r2
- Introduced through: docker-image|redis@7.0.15-alpine › apk-tools/apk-tools@2.14.4-r0 › openssl/libcrypto3@3.3.0-r2
- Introduced through: docker-image|redis@7.0.15-alpine › busybox/ssl_client@1.36.1-r28 › openssl/libcrypto3@3.3.0-r2
- Introduced through: docker-image|redis@7.0.15-alpine › .redis-rundeps@20240524.005525 › openssl/libssl3@3.3.0-r2 › openssl/libcrypto3@3.3.0-r2
- Introduced through: docker-image|redis@7.0.15-alpine › openssl/libssl3@3.3.0-r2
- Introduced through: docker-image|redis@7.0.15-alpine › .redis-rundeps@20240524.005525 › openssl/libssl3@3.3.0-r2
- Introduced through: docker-image|redis@7.0.15-alpine › apk-tools/apk-tools@2.14.4-r0 › openssl/libssl3@3.3.0-r2
- Introduced through: docker-image|redis@7.0.15-alpine › busybox/ssl_client@1.36.1-r28 › openssl/libssl3@3.3.0-r2

## NVD Description

This vulnerability has not been analyzed by NVD yet.

## Remediation

Upgrade `Alpine:3.20` `openssl` to version 3.3.0-r3 or higher.

More about this vulnerability