# AWX and Lodash **URL:** \ **Category:** AWX Project\ **Tags:** awx\ **Created:** [September 5, 2023, 5:50pm UTC](https://forum.ansible.com/t/awx-and-lodash/38401 "2023-09-05T17:50:45Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Chuck\_Harpham](https://avatars.discourse-cdn.com/v4/letter/c/919ad9/32.png) [@Chuck\_Harpham](https://forum.ansible.com/u/Chuck_Harpham)\ **Post date:** [September 5, 2023, 5:50pm UTC](https://forum.ansible.com/t/awx-and-lodash/38401/1 "2023-09-05T17:50:45Z")
I am rather new to Ansible/AWX… Does anybody know if the default install of AWX uses lodash… the company’s vulnerability scanner found a potential vulnerability alert on Lodash, I have no idea where there is installed… I do know it is somehow related to js… I am currently using AWX 15.0.1 which I know is not the latest ---
**Author:** ![golakiyaalice](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/golakiyaalice/32/1046_2.png) [@golakiyaalice](https://forum.ansible.com/u/golakiyaalice)\ **Post date:** [September 28, 2023, 11:59am UTC](https://forum.ansible.com/t/awx-and-lodash/38401/2 "2023-09-28T11:59:13Z")
Hi All, I am trying to import all the images to my private ACR through dedicated organization level pipelines which scans the images using snyk tool and below is the results of vulnerabilities. ---
**Author:** ![AWX\_Project](https://avatars.discourse-cdn.com/v4/letter/a/eada6e/32.png) [@AWX\_Project](https://forum.ansible.com/u/AWX_Project)\ **Post date:** [September 29, 2023, 5:31pm UTC](https://forum.ansible.com/t/awx-and-lodash/38401/3 "2023-09-29T17:31:24Z")
do you have a more detailed report, i.e. what is the critical vulnerability for the awx-operator that your scanner flagged? AWX Team ---
**Author:** ![golakiyaalice](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/golakiyaalice/32/1046_2.png) [@golakiyaalice](https://forum.ansible.com/u/golakiyaalice)\ **Post date:** [October 2, 2023, 4:40am UTC](https://forum.ansible.com/t/awx-and-lodash/38401/4 "2023-10-02T04:40:35Z")
Hi, Below is the list. I somehow managed to fix the awx-operator image. AWX Image: Snyk Severity CVSSv3 Score CVE Description Module Disclosed Published Snyk high **8.8** [CVE-2022-1271](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1271) Incorrect Behavior Order: Early Validation centos:9:xz-libs@5.2.5-8.el9 2022-04-07 2022-04-09 […](https://snyk.io/vuln/SNYK-CENTOS9-XZLIBS-2890225) high **7.5** [CVE-2022-24070](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24070) Use After Free centos:9:subversion-libs@1.14.1-5.el9 2021-11-04 2022-04-13 […](https://snyk.io/vuln/SNYK-CENTOS9-SUBVERSIONLIBS-2889857) high **7.5** [CVE-2022-24070](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24070) Use After Free centos:9:subversion@1.14.1-5.el9 2021-11-04 2022-04-13 […](https://snyk.io/vuln/SNYK-CENTOS9-SUBVERSION-2889683) high **5.3** [CVE-2023-40217](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40217) Authentication Bypass by Primary Weakness centos:9:python3-libs@3.9.17-1.el9 2023-08-25 2023-08-31 […](https://snyk.io/vuln/SNYK-CENTOS9-PYTHON3LIBS-5876922) high **5.3** [CVE-2023-40217](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40217) Authentication Bypass by Primary Weakness centos:9:python3-devel@3.9.17-1.el9 2023-08-25 2023-08-31 […](https://snyk.io/vuln/SNYK-CENTOS9-PYTHON3DEVEL-5876920) high **5.3** [CVE-2023-40217](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40217) Authentication Bypass by Primary Weakness centos:9:python3@3.9.17-1.el9 2023-08-25 2023-08-31 […](https://snyk.io/vuln/SNYK-CENTOS9-PYTHON3-5876906) high **8.6** [CVE-2022-47629](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47629) Integer Overflow or Wraparound centos:9:libksba@1.5.1-6.el9 2022-10-17 2023-01-17 […](https://snyk.io/vuln/SNYK-CENTOS9-LIBKSBA-3231955) high **7.5** [CVE-2023-23946](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23946) Directory Traversal centos:9:git-core@2.39.3-1.el9 2023-02-14 2023-02-18 […](https://snyk.io/vuln/SNYK-CENTOS9-GITCORE-3325313) high **5.5** [CVE-2023-22490](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22490) Resource Leak centos:9:git-core@2.39.3-1.el9 2023-02-14 2023-02-18 […](https://snyk.io/vuln/SNYK-CENTOS9-GITCORE-3325349) high **2.2** [CVE-2023-25815](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25815) Use of Externally-Controlled Format String centos:9:git-core@2.39.3-1.el9 2023-04-25 2023-04-26 […](https://snyk.io/vuln/SNYK-CENTOS9-GITCORE-5482356) high **7.8** [CVE-2023-29007](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29007) Arbitrary Code Injection centos:9:git-core@2.39.3-1.el9 2023-04-25 2023-04-26 […](https://snyk.io/vuln/SNYK-CENTOS9-GITCORE-5482402) high **7.5** [CVE-2023-25652](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25652) Directory Traversal centos:9:git-core@2.39.3-1.el9 2023-04-25 2023-04-26 […](https://snyk.io/vuln/SNYK-CENTOS9-GITCORE-5482416)