Upgrade Alpine:3.21 upx to version 4.0.0-r0 or higher.

openssl-3 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the openssl-3 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M CVE-2024-13176	<3.0.8-150500.5.51.1
M Information Exposure	<3.0.8-150500.5.48.1
H CVE-2024-41996	<3.0.8-150500.5.48.1
H CVE-2024-41996	<3.0.8-150500.5.45.1
H CVE-2024-6119	<3.0.8-150500.5.42.1
M CVE-2024-5535	<3.0.8-150500.5.39.1
H CVE-2024-4741	<3.0.8-150500.5.36.1
M CVE-2024-4603	<3.0.8-150500.5.33.1
M CVE-2024-2511	<3.0.8-150500.5.30.1
L CVE-2024-0727	<3.0.8-150500.5.27.1
M CVE-2023-6237	<3.0.8-150500.5.24.1
M Out-of-bounds Write	<3.0.8-150500.5.24.1
M Improper Check for Unusual or Exceptional Conditions	<3.0.8-150500.5.19.1
H CVE-2023-5363	<3.0.8-150500.5.14.1
M Excessive Iteration	<3.0.8-150500.5.14.1
M Excessive Iteration	<3.0.8-150500.5.11.1
M Inefficient Regular Expression Complexity	<3.0.8-150500.5.8.1
M Improper Authentication	<3.0.8-150500.5.8.1
M Allocation of Resources Without Limits or Throttling	<3.0.8-150500.5.3.1
M Out-of-bounds Read	<3.0.8-150500.5.3.1