Skip to content

Fix the CVEs attached int he excel sheet for ATTU - 2.6.1 #1020

Open

Description

Attu_MilvusUI_CVEs.xlsx

Describe the bug:
Found multiple CVEs for the attu 2.6.1 version by performing a Twistlock scan.

Steps to reproduce:
1.docker pull zilliz/attu:v2.6.1
2.Perform Twistlock scan
3.The scan report shows critical, High, Medium and Low vulnerabilities which need to be fixed.

Attu version:
2.6.1

Activity

  1. shanghaikid commented on Sep 3, 2026

    @shanghaikid
    Collaborator

    Thanks for reporting this. The Attu 2.6.x release line is no longer maintained, so we do not plan to release further fixes for v2.6.1. Please upgrade to Attu v3.0.0, which is compatible with Milvus 2.6.x. If a scan of the latest v3.0.0 image still reports vulnerabilities, please share the updated results with us.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions