Snyk - Open Source Security

Snyk test report

November 8th 2026, 12:21:50 am (UTC+00:00)

Scanned the following path:
  • public.ecr.aws/docker/library/redis:8.10.3-alpine/docker/library/redis (apk)
1 known vulnerabilities
3 vulnerable dependency paths
23 dependencies
Project docker-image|public.ecr.aws/docker/library/redis
Path public.ecr.aws/docker/library/redis:8.10.3-alpine/docker/library/redis
Package Manager apk

CVE-2026-4738

low severity
Exploit: Not Defined
  • Package Manager: alpine:3.23
  • Vulnerable module: zlib/zlib
  • Introduced through: docker-image|public.ecr.aws/docker/library/redis@8.10.3-alpine and zlib/zlib@1.3.2-r1

Detailed paths

  • Introduced through: docker-image|public.ecr.aws/docker/library/redis@8.10.3-alpine › zlib/zlib@1.3.2-r1
  • Introduced through: docker-image|public.ecr.aws/docker/library/redis@8.10.3-alpine › apk-tools/apk-tools@3.0.9-r0 › zlib/zlib@1.3.2-r1
  • Introduced through: docker-image|public.ecr.aws/docker/library/redis@8.10.3-alpine › apk-tools/apk-tools@3.0.9-r0 › apk-tools/libapk@3.0.9-r0 › zlib/zlib@1.3.2-r1

NVD Description

Note: Versions mentioned in the description apply only to the upstream zlib package and not the zlib package as distributed by Alpine. See How to fix? for Alpine:3.23 relevant fixed versions and status.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C‎.

This issue affects gdal: before 3.11.0.

Remediation

Upgrade Alpine:3.23 zlib to version 1.4-r0 or higher.

References

More about this vulnerability