The latest version contains security vulnerabilities

[OlgasAcc]

Postgres version: 17-alpine3.20

The version is vulnerable because it uses gosu v17 (which uses stdlib v1.18.2):

Is it possible to upgrade the Go stdlib to v1.23?

Thanks

[tianon]

I think this is technically a duplicate of #1271 (because "stdlib" is probably your scanner picking up the Go standard library inside the gosu binary).

See especially #1271 (comment), https://github.com/tianon/gosu/blob/4233b796eeb3ba76c8597a46d89eab1f116188e2/SECURITY.md, and https://github.com/docker-library/faq#why-does-my-security-scanner-show-that-an-image-has-cves