Vulnerability - CVE-2025-64756

[sschinna]

mcr.microsoft.com/azure-functions/node:4-node22 image having vulnerabilities.

CVSS Score: | 7.5h -- | -- EPSS Score:⁠ | 0.00036(0.101) Affected version range: | >=10.2.0,<10.5.0 Fix version: | 11.1.0 CVE publish date: | 22 days ago Added by: |   Package location: | /usr/lib/node_modules/npm/node_modules/glob/package.json Package details: |   More details: | View on scout.docker.com⁠ CVSS Score: 7.5 h [EPSS Score:⁠](https://www.first.org/epss/faq) 0.00036 (0.101) Affected version range: >=10.2.0,<10.5.0 Fix version: 11.1.0 CVE publish date: 22 days ago

Added by:
Package location:
/usr/lib/node_modules/npm/node_modules/glob/package.json

Package details:
More details: View on scout.docker.com⁠

[sschinna]

MCR Image for node22 has vulnerabilities associated with it
mcr.microsoft.com/azure-functions/node:4-node22 appears to have a vulnerability CVE-2021-24112. This is in the '/FuncExtensionBundles' part of the image where system.drawing.common is using the 4.5.2 version that has the associated CVE.