Trivy scan reveals docker/cli CVE-2021-41092 vulnerability [HIGH].

[ACodingGenie]

Describe the bug Trivy scan reports some vulnerabilities within the Go binary dependencies. I didn't think they were critical so just reporting them here. This is on the latest version of Watchtower docker image.

To Reproduce Steps to reproduce the behavior:

1. Go to https://github.com/aquasecurity/trivy and install Trivy for your distro.
2. Run trivy image [image-name] to scan the image.

Expected behavior Trivy should not report any vulnerabilities unless these are false positives.

Screenshots

We want to know:

• Platform: Docker on Debian 11
• Architecture: x86_64
• Docker version: 20.10.12, build e91ed57

[github-actions[bot]]

Hi there! 👋🏼 As you're new to this repo, we'd like to suggest that you read our code of conduct as well as our contribution guidelines. Thanks a bunch for opening your first issue! 🙏

[simskij]

A lot of builds and dependency upgrades have been done since. trivy image containrrr/watchtower:latest currently lists no CVEs at all.