# Regarding the security of the ELK stack docker images

**URL:** <https://discuss.elastic.co/t/regarding-the-security-of-the-elk-stack-docker-images/272895>\
**Category:** Elasticsearch\
**Created:** [May 13, 2021, 8:52am UTC](https://discuss.elastic.co/t/regarding-the-security-of-the-elk-stack-docker-images/272895 "2021-05-13T08:52:34Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![signum](https://avatars.discourse-cdn.com/v4/letter/s/3d9bf3/32.png) [@signum](https://discuss.elastic.co/u/signum)\
**Post date:** [May 13, 2021, 8:52am UTC](https://discuss.elastic.co/t/regarding-the-security-of-the-elk-stack-docker-images/272895/1 "2021-05-13T08:52:34Z")

</div>

Hi, I am trying out the docker version of the ELK stack, and have noted that when I scan it using trivy / "docker scan", it is showing some OS related vulnerabilities for libraries such curl etc. Can I understand if these findings are accurate and if anyone is able to advise on this?

Thank you for any advice on this matter!

---

<div class="post-metadata">

**Author:** ![austinsonger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/austinsonger/32/78994_2.png) [@austinsonger](https://discuss.elastic.co/u/austinsonger)\
**Post date:** [May 14, 2021, 5:04pm UTC](https://discuss.elastic.co/t/regarding-the-security-of-the-elk-stack-docker-images/272895/2 "2021-05-14T17:04:43Z")

</div>

1. If the docker container you are using isn't from the following [elastic's Profile (docker.com)](https://hub.docker.com/u/elastic), then there isn't much Elastic can help you on.
2. Can you send the link to the elk docker your using (Github or Docker Hub)
3. Can you send the CVE numbers for the vulnerabilities?
4. I would recommend you to use this ELK docker by Swimlane [GitHub - swimlane/elk-tls-docker: This repository contains code to create a ELK stack with certificates & security enabled using docker-compose](https://github.com/swimlane/elk-tls-docker)

---

<div class="post-metadata">

**Author:** ![signum](https://avatars.discourse-cdn.com/v4/letter/s/3d9bf3/32.png) [@signum](https://discuss.elastic.co/u/signum)\
**Post date:** [May 19, 2021, 1:14am UTC](https://discuss.elastic.co/t/regarding-the-security-of-the-elk-stack-docker-images/272895/3 "2021-05-19T01:14:06Z")

</div>

Hi,

This would be from [docker.elastic.co/elasticsearch/elasticsearch:latest](http://docker.elastic.co/elasticsearch/elasticsearch:latest)

The CVEs are mainly related to the centos side of the containers, will highlight some of them here:

i) CVE-2021-22876  
ii) CVE-2020-8625  
iii) CVE-2021-20305

I will take a look at the Swimlane ELK Docker as well, thank you for the info!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 16, 2021, 1:14am UTC](https://discuss.elastic.co/t/regarding-the-security-of-the-elk-stack-docker-images/272895/4 "2021-06-16T01:14:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.