Dpc: 취약성 스캐너에서 Node.js 및 MongoDB 버전이 지원되지 않음을 보고함

스캐너는 다음을 보여줍니다. Node.jsDPC에 설치된 가 지원되지 않습니다.

스캐너는 다음을 보여줍니다. MongoDBDPC에 설치된 가 지원되지 않습니다.

이는 DPC 서버에서 취약성 스캐너가 실행된 결과입니다.

제품 관리 및 엔지니어링 팀에서 이 문제에 대한 다음 정보를 제공했습니다. 

MongDB:

"MongoDB 4.2.x will remain at its current version within our architecture. While MongoDB is out of vendor compatibility/compliance, our multilayered security architecture prevents external attacks: MongoDB is not directly accessible from external networks, protected by firewall rules, and only accessible internally through authenticated application layers. This isolation eliminates direct attack vectors, making the system secure despite EOL status. We continue to provide break/fix support and security patching where applicable and possible."

Node.js:

"We acknowledge Node.js 16.x (v16.20.2) reached End-of-Life. However, our deployment architecture eliminates attack surfaces: Node.js is bundled within the application (not system-wide), production serves only prebuilt static files, Node.js runtime is never exposed to network requests, and the npm package manager is absent in production. This means attackers cannot directly target or exploit Node.js vulnerabilities, making the deployment secure despite EOL status."