Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Critical vulnerability in @kubernetes/client-node": "0.10.2". #766

Open
danielbarr3ra opened this issue Oct 16, 2024 · 1 comment
Open

Critical vulnerability in @kubernetes/client-node": "0.10.2". #766

danielbarr3ra opened this issue Oct 16, 2024 · 1 comment

Comments

@danielbarr3ra
Copy link

danielbarr3ra commented Oct 16, 2024 •
edited
Loading

Hi team, currently in your package-lock you list "@kubernetes/client-node": "0.10.2", as a dependency. This dependency should be bumped to the latest version 0.22.1, there is CVE case of high vulnerability.

Here are some helpful links
change log shows kubernetes-client has resolved it

I can spin up a PR, not sure if this is still maintained I see it was last updated on 2020
@dShringi
Copy link

We're facing the same issue caused by the jsonpath-plus dependency which has the CVE.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@dShringi @danielbarr3ra