[whummer]

Thanks for the feedback! LocalStack CTO here. Very timely - we're right now in the process of upgrading all dependencies (JAR files, etc) in our Docker images to reduce the exposure for potential vulnerabilities.

The scan results of the security scanning tool we're using look promising - they're almost green already.. :) Please let us know if there's anything particular that's blocking you from bringing it into your company! Appreciated

[insomniacity]

Just scanned 1.0.1 - 26 vulns dating back to 2018.

That’s down from 35 when I raised the issue 2 years ago!

How would you like me to let you know about these?

[whummer]

If you could link the Github issue here, that would be great. We'll make sure to prioritize it. Thanks