Forum Discussion

Samuel_St-o's avatar
Samuel_St-o
New Contributor
5 months ago

Vulnerabilities in 1Password CLI Docker image (v2.30.3) – Request for fix timeline

Hello 1Password team, We are using the official 1password/op:2.30.3 Docker image in a SOC 2–compliant environment, and a recent security scan flagged multiple fixable vulnerabilities in the image, p...
CLI
security
1P_Simon's avatar
1P_Simon
Icon for 1Password Team rank1Password Team
4 months ago

Hi Samuel_St-o​ , in our investigations we have not found exploitable vulnerabilities. That said, we've released https://releases.1password.com/developers/cli/#1password-cli-2.31.0 yesterday which does include maintenance updates of dependencies, and you can update as a best practice and to avoid false-positives showing up in your security scanners.

1P_Simon's avatar
1P_Simon
Icon for 1Password Team rank1Password Team
4 months ago

Oh and to answer your question regarding Docker specifically: yes, this release includes updated Docker image: https://hub.docker.com/layers/1password/op/2.31.0/images/sha256-634d922323bf22253bd9f003cc7a44c44584d89b30809d2309b63136114d9919