Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

k8s.io/apimachinery/pkg/util/runtime HIGH CVE #32449

Open
vrumiantsev opened this issue Dec 23, 2024 · 0 comments
Open

k8s.io/apimachinery/pkg/util/runtime HIGH CVE #32449

vrumiantsev opened this issue Dec 23, 2024 · 0 comments

Comments

@vrumiantsev
Copy link

Our security team is flagging the current datadog agent image contains vulnerability with HIGH severity:

  High severity vulnerability found in k8s.io/apimachinery/pkg/util/runtime
  Description: Denial of Service (DoS)
  Info: https://security.snyk.io/vuln/SNYK-GOLANG-K8SIOAPIMACHINERYPKGUTILRUNTIME-8367153
  Introduced through: k8s.io/apimachinery/pkg/util/[email protected]
  From: k8s.io/apimachinery/pkg/util/[email protected]
  Fixed in: 0.29.0-alpha.3, 1.29.0-alpha.3

Our corporate policy is to address High and Critical CVEs within 90 days of a released fix. Since fix released long time back(more than a year ago), could you please work on a remediation?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant