k3d
k3d copied to clipboard
[BUG] Vulnerability in docker v27.03 used in k3d
What did you do
-
How was the cluster created?
- Installed k3d using the install script command and ran a vulnerability scanner on it.
- It reported a critical vulnerability in docker v27.0.3 which is what the project uses.
https://avd.aquasec.com/nvd/2024/cve-2024-41110/
It's been fixed in v27.1.1
What did you expect to happen
Can we evaluate if we can upgrade the the docker version?
Screenshots or terminal output
If applicable, add screenshots or terminal output (code block) to help explain your problem.
Which OS & Architecture
- alpine:latest
Which version of k3d
5.7.3
Which version of docker
The k3d binary uses the older library v27.0.3 which we likely need to upgrade