# Critical vulns in logstash docker: CVE-2022-46337, CVE-2021-26291 **URL:** \ **Category:** Logstash\ **Tags:** docker\ **Created:** [December 5, 2023, 12:10pm UTC](https://discuss.elastic.co/t/critical-vulns-in-logstash-docker-cve-2022-46337-cve-2021-26291/348637 "2023-12-05T12:10:12Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![AdrianTT](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/adriantt/32/128671_2.png) [@AdrianTT](https://discuss.elastic.co/u/AdrianTT)\ **Post date:** [December 5, 2023, 12:10pm UTC](https://discuss.elastic.co/t/critical-vulns-in-logstash-docker-cve-2022-46337-cve-2021-26291/348637/1 "2023-12-05T12:10:12Z")
trivy reports in the logstash:8.11 docker image the following critical vulns: - CVE-2022-46337 in org.apache.derby:derby (derby-10.14.1.0.jar) - CVE-2021-26291 in org.apache.maven:maven-compat (maven-compat-3.3.9.jar), org.apache.maven:maven-core (maven-core-3.3.9.jar) These CVEs are not listed on the security issues page. [https://www.elastic.co/community/security](https://www.elastic.co/community/security) There's no acknowledgment of it or recommendations for remediation. Please advise. ---
**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\ **Post date:** [December 5, 2023, 5:11pm UTC](https://discuss.elastic.co/t/critical-vulns-in-logstash-docker-cve-2022-46337-cve-2021-26291/348637/2 "2023-12-05T17:11:36Z")
You should enquire via email to `security@elastic.co`. They will not respond to a request here. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 2, 2024, 5:12pm UTC](https://discuss.elastic.co/t/critical-vulns-in-logstash-docker-cve-2022-46337-cve-2021-26291/348637/3 "2024-01-02T17:12:25Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.