kubecost / cluster-turndown

Automated turndown of Kubernetes clusters on specific schedules.
Apache License 2.0
265 stars 25 forks source link

Fix high CVE #67

Closed cliffcolvin closed 6 months ago

cliffcolvin commented 7 months ago

Resolves all of the following CVE: Base Image Scan CRITICAL: CVE-2022-37434

HIGH: CVE-2022-4450 CVE-2023-0215 CVE-2023-0286 CVE-2023-0464 CVE-2022-4450 CVE-2023-0215 CVE-2023-0286 CVE-2023-0464

MEDIUM: CVE-2022-2097 CVE-2022-4304 CVE-2023-0465 CVE-2023-2650 CVE-2023-3446 CVE-2023-3817 CVE-2023-5678 CVE-2022-2097 CVE-2022-4304 CVE-2023-0465 CVE-2023-2650 CVE-2023-3446 CVE-2023-3817 CVE-2023-5678

Go App Scan HIGH: CVE-2020-29652 CVE-2021-43565 CVE-2022-27191 CVE-2021-33194 CVE-2022-27664 CVE-2022-41723 CVE-2023-39325 CVE-2021-38561 CVE-2022-32149 GHSA-m425-mq94-257g

MEDIUM: CVE-2023-44487 CVE-2024-24786 CVE-2021-31525 CVE-2023-3978 CVE-2023-44487 CVE-2022-29526 CVE-2023-48795 CVE-2020-8911 CVE-2022-2582 GHSA-76wf-9vgp-pj7w

LOW: CVE-2020-8912