# Vulnerabilities in docker image elasticsearch/elasticsearch:7.17.8 **URL:** \ **Category:** Elasticsearch\ **Tags:** docker\ **Created:** [January 18, 2023, 5:44am UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377 "2023-01-18T05:44:32Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Jayasree\_N](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jayasree_n/32/116059_2.png) [@Jayasree\_N](https://discuss.elastic.co/u/Jayasree_N)\ **Post date:** [January 18, 2023, 5:44am UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377/1 "2023-01-18T05:44:32Z")
Hi, we are using elasticsearch/elasticsearch:7.17.8 docker image. We are getting few CVEs reported as high with the vulnerabilities scanning report. CVE-2021-31684 -- nimbus-jose-jwt and json-smart CVE-2020-36518 -- jackson-databind CVE-2022-3509 -- protobuf-java CVE-2021-40690 -- xmlsec CVE-2022-43551 -- ubuntu CVE-2022-3510 -- protobuf-java CVE-2022-40152 -- woodstox-core CVE-2021-37136 -- netty-codec CVE-2022-41915 -- netty-codec-http CVE-2020-8908 -- guava Any suggestions how to fix these vulnerabilities ? ---
**Author:** ![ikakavas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ikakavas/32/34430_2.png) [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Post date:** [January 18, 2023, 6:06am UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377/2 "2023-01-18T06:06:14Z")
Thank you for your report. Elastic's security reporting guidelines are available at [Security issues | Elastic](https://www.elastic.co/community/security). Per those guidelines, all reports of potential security issues or vulnerabilities should be sent via email to [security@elastic.co](mailto:security@elastic.co). We are unable to discuss potential issues of this nature here. Please send your report to the email address above, where it can be appropriately handled. ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [January 18, 2023, 7:37am UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377/3 "2023-01-18T07:37:24Z")
Just a note. The version you mentioned is not the latest of the 7.17 series. You should upgrade your version IMHO. ---
**Author:** ![Jayasree\_N](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jayasree_n/32/116059_2.png) [@Jayasree\_N](https://discuss.elastic.co/u/Jayasree_N)\ **Post date:** [January 18, 2023, 2:19pm UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377/4 "2023-01-18T14:19:48Z")
@dadoonet, as per this documentation [Release notes | Elasticsearch Guide [7.17] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.17/es-release-notes.html), seems 7.17.8 is the latest release on 7.17 series. Could you please help in point me if there is any new release available for 7.17 series. Thanks JN ---
**Author:** ![Jayasree\_N](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jayasree_n/32/116059_2.png) [@Jayasree\_N](https://discuss.elastic.co/u/Jayasree_N)\ **Post date:** [January 18, 2023, 2:20pm UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377/5 "2023-01-18T14:20:29Z")
@ikakavas, Thank you for the reply. I will email to [security@elastic.co](mailto:security@elastic.co). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [January 18, 2023, 2:55pm UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377/6 "2023-01-18T14:55:48Z")
My bad. I misread your post sorry. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 15, 2023, 2:55pm UTC](https://discuss.elastic.co/t/vulnerabilities-in-docker-image-elasticsearch-elasticsearch-7-17-8/323377/7 "2023-02-15T14:55:52Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.