ekuiper
ekuiper copied to clipboard
Some dependencies of eKuiper are outdated and vunlnerable
Environment:
- eKuiper version (e.g.
1.3.0
): 1.10.1 - Hardware configuration (e.g.
lscpu
): - OS (e.g.
cat /etc/os-release
):linux/amd64 - Others:
What happened and what you expected to happen:
eKuiper has some CVE vulnerabilities scanned by security scanners in its dependencies. It is recommended to update the Go modules to enhance security.
How to reproduce it (as minimally and precisely as possible):
Anything else we need to know?:
Do you have a link? We usually update the dependencies before a new minor release. Some of the dependencies already archive, do you have any suggestions for how to deal with them.
This is a built-in images security scanner of Docker client . For the archived dependencies, it is recommended to find alternative dependencies that are similar.