Our Wiz scanner detected that the the hubble-ui v0.13.3 frontend, which according to the Dockerfile uses the nginx image version nginx-unprivileged:1.29.1-alpine3.22-slim does have the libssl vulnerability CVE-2025-15467.
I just checked the nginx image and it seems that it is based on the alpine linux and the alpine linux contributors fixed it in the version 3.23.3. So, if you will try to build new hubble-ui frontend based on the newer nginx image nginx-unprivileged:1.29.5-alpine3.23-slim that should effectively solve the vulnerability.
Let me know if you will need any extra information from me.
Our Wiz scanner detected that the the hubble-ui
v0.13.3frontend, which according to the Dockerfile uses the nginx image versionnginx-unprivileged:1.29.1-alpine3.22-slimdoes have the libssl vulnerability CVE-2025-15467.I just checked the nginx image and it seems that it is based on the alpine linux and the alpine linux contributors fixed it in the version 3.23.3. So, if you will try to build new hubble-ui frontend based on the newer nginx image nginx-unprivileged:1.29.5-alpine3.23-slim that should effectively solve the vulnerability.
Let me know if you will need any extra information from me.