Getting Crowd Strike Vulnerablity Issue using Mend Renovate (renovate/renovate:latest) Build in Docker

[manojkumark-create]

How are you running Renovate?

Self-hosted Renovate CLI

Which platform you running Renovate on?

Other (please specify)

Which version of Renovate are you using?

Latest

Please tell us more about your question or problem

Hi Team,
We have use the Mend Renovate latest version in Dcoker file and We build the docker image and scan the renovate docker image with crowd strike via pipeline and we get some vulnerablity issues. Please advise.

Logs (if relevant)

Logs

Replace this text with your logs, between the starting and ending triple backticks

[github-actions[bot]]

Hi there,
To the Discussion creator: please edit and improve the "Which version of Renovate are you using?" answer.
You've specified either latest or a major version number, but as Renovate ships many updates daily, the specific version of Renovate that runs changes.
You can find the specific Renovate version by checking the INFO: Repository started log line.
Thanks, the Renovate team

[jamietanna]

Please also share which vulnerabilities you're seeing, as different scanners show different results

[jamietanna]

Also, the exact Docker image tag i.e. 43.x.y-full

[manojkumark-create]

Here my docker tag:
FROM renovate/renovate:latest

[jamietanna]

Yep, if you can please provide the exact tag it's resolved as, and then what vulnerabilities you're seeing that you're concerned about, we can help more

[manojkumark-create]

Hi,
Here we got the vulnerablity while image scan.
"Vulnerability": {
"CVEID": "CVE-2026",
"Product": {
"Product": "minimatch",
"MajorVersion": "10.2.2",
"SoftwareArchitecture": "amd64",
"PackageSource": "minimatch 10.2.2",
"Path": "usr/lib/node_modules/npm/node_modules/minimatch/package.json"
},
"ContentDataHash": 0,
"Remediation": [
"Upgrade to version 10.2.3"
],

				}

"Vulnerability": {
"CVEID": "CVE-2026",
"Product": {
"Product": "tar",
"MajorVersion": "6.2.1",
"SoftwareArchitecture": "amd64",
"PackageSource": "tar 6.2.1",
"Path": "usr/local/lib/node_modules/renovate/node_modules/tar/package.json"
},
"ContentDataHash": 0,
"Remediation": [
"Upgrade to version 7.5.7"
],
}

[manojkumark-create]

Docker Tags:

FROM node:24-slim

RUN npm install -g renovate

[jamietanna]

I still don't see the exact version of Renovate you're using

[github-actions[bot]]

Hi, please format any copy/pasted code or logs so they're readable.

You can read a Markdown code formatting guide as well as some GitHub-specific information formatting code blocks.

Thanks, the Renovate team