Need help with CVE-2023-24538⁠, CVE-2023-24540, CVE-2024-21626 and CVE-2023-27561

[shuukphil]

I can see these CVE issues across all version of MongoDB, are these false positive or it fixable?
I tried upgraded your gosu from 1.16 to 1.17 during the container re-build from your official docker image, When I run it the CVE are gone and my application still functions, just have doubt and wanted to ask MongoDB team will it break some functionalities if i upgraded your gosu?
Thanks

[tianon]

Updating to the newer gosu would be great! 😄

[tianon]

Ah, #672 😄

[alvintayzhenwei]

@tianon Will this be applied on docker hub official Images ?

[yosifkit]

https://github.com/docker-library/mongo/tree/12fc21f8786d0ec14c01ce40a1487d893ef512b9#see-a-change-merged-here-that-doesnt-show-up-on-docker-hub-yet

It already has been: docker-library/official-images#16205