Open aqan213 opened 3 years ago
Hi, Can anyone help to check this issue? thanks,
The customer is supposed to fix it in Feb. Is it possible to address this issue asap or can you please give us a date when you plan to do it? thanks,
Hi, We are also facing the same issue. is there a fix expected for this any time soon
Hi ... any chance to replace "request" with something else not vulnerable?
There is already an issue here for request being deprecated.
https://github.com/godaddy/kubernetes-client/issues/614
It would probably make sense to close this issue in preference to that issue.
Our customer reported a vulnerability in bluemix-autoscaling-agent caused by "request" package. The vulnerability reports that
Here is the hierarchy of the "request" module tracking back to appmetrics
"request"
-->kubernetes-client"
-->"ibmapm-restclient"
-->"ibmapm-embed"
-->"appmetrics"
-->bluemix-autoscaling-agent
According to request/request#2640 it looks like all versions of request are vulnerable and the request package is depreciated. Can you please take a look? thanks,