[Bug]: CVEs of milvus-config-tool:v0.3.0 & milvus-config-tool:v0.1.2

milvus-io / milvus

A cloud-native vector database, storage for next generation AI applications

https://milvus.io

Apache License 2.0

29.27k stars 2.81k forks source link

[Bug]: CVEs of milvus-config-tool:v0.3.0 & milvus-config-tool:v0.1.2 #34622

Closed weiZhenkun closed 4 days ago

weiZhenkun commented 1 month ago

Is there an existing issue for this?

[X] I have searched the existing issues

Environment

- Milvus version: Milvus 2.4.5

Current Behavior

There are 5 high CVEs in milvus-config-tool. Is the milvus-config-tool is a open source project?

Expected Behavior

No response

Steps To Reproduce

No response

Milvus Log

No response

Anything else?

No response

yanliang567 commented 1 month ago

/assign @LoveEachDay /unassign

weiZhenkun commented 1 month ago

@LoveEachDay any update for this?

LoveEachDay commented 1 month ago

@weiZhenkun We've removed the milvus-config-tool image for milvus helm deployment.

stale[bot] commented 1 week ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. Rotten issues close after 30d of inactivity. Reopen the issue with /reopen.