We’re currently on Retool 3.334.13.
This CVE says that the ngx_stream_js_module needs to be 0.9.9, but it is currently at 0.9.8.
sudo docker exec <nginx_container_id> njs -V
0.9.8
We have a request from our security department to mitigate this issue.
Wanted to put this on your radar if it isn’t.
If it is, do you know when a patch will be available?
Hi @latkins! Thank you for your patience with this situation - I have asked our Trust team about this for more guidance!
Since you are self-hosting do you know which deployment model you are using? In self-hosted you have full control of the nginx ingress and can update it freely on your end.
The Trust team can update Retool's templates and Helm charts if you use that, but they were not able to see any specific version pinning in you for ingress.
Hope this helps! Let me know if you have any other questions 
-Jen
Thanks for your response, Jen. Yes, we were able to filter for this on the host. Also, turns out we are using nginx:latest, so it was a misunderstanding on our end: once we ran the latest patch and docker build it was updated.
@latkins Great, thanks for the additional context. Glad to hear that things are good now after running the latest patch and docker build!