search

danielqsj / kafka_exporter

Kafka exporter for Prometheus
Apache License 2.0
2.18k stars 610 forks source link

latest Docker hub image has changed but there has been no new release in this repo #412

Open davidboweninrupt opened 10 months ago

davidboweninrupt commented 10 months ago

Hi,

I noticed that the Docker hub image tagged latest has changed but I also noticed that the latest release from the github repo was still 1.7.0 (which has been working nicely for us).

It looks as though perhaps the 1.7.0 release was re-packaged for #411 but my scanning shows latest still has CVE-2023-39325 in it.

Can you confirm that latest was published by you?

I'm sorry if this sounds nervous, but I wanted to check it's not a supply-chain attack.

Thanks