Dpc：漏洞扫描程序报告 Node.js 和 MongoDB 版本不受支持

扫描仪显示 Node.js的 DPC 上安装的 不再受支持。

扫描仪显示 MongoDB的 DPC 上安装的 不再受支持。

这是在 DPC 服务器上运行漏洞扫描程序的结果。

产品管理和工程部门提供了有关此问题的以下信息。 

MongDB:

"MongoDB 4.2.x will remain at its current version within our architecture. While MongoDB is out of vendor compatibility/compliance, our multilayered security architecture prevents external attacks: MongoDB is not directly accessible from external networks, protected by firewall rules, and only accessible internally through authenticated application layers. This isolation eliminates direct attack vectors, making the system secure despite EOL status. We continue to provide break/fix support and security patching where applicable and possible."

Node.js:

"We acknowledge Node.js 16.x (v16.20.2) reached End-of-Life. However, our deployment architecture eliminates attack surfaces: Node.js is bundled within the application (not system-wide), production serves only prebuilt static files, Node.js runtime is never exposed to network requests, and the npm package manager is absent in production. This means attackers cannot directly target or exploit Node.js vulnerabilities, making the deployment secure despite EOL status."