KubeOperator icon indicating copy to clipboard operation
KubeOperator copied to clipboard

Vulnerability of dependency "helm.sh/helm/v3"

Open Silence-worker-02 opened this issue 1 year ago • 1 comments

Hello, we are a team researching the dependency management mechanism of Golang. During our analysis, we came across your project and noticed that it contains a vulnerability (CVE-2023-25165). In your project, the helm.sh/helm/v3 package is being used at version helm.sh/helm/v3 v3.9.4, but the patched version is v3.11.1. To fix the vulnerability, we recommend modifying the go.mod file to update the version to v3.11.1 or higher. Thank you for your attention to this matter.

Silence-worker-02 avatar Jul 14 '23 08:07 Silence-worker-02

感谢反馈,我们会在后续版本修复。

wanghe-fit2cloud avatar Oct 03 '23 14:10 wanghe-fit2cloud