A couple of CVEs found in 2.15.0

[rahulporwal73]

Hello everybody,
Our security scans detected some vulnerabilities,

[https://github.com/advisories/GHSA-8mm9-c4mg-vfjh]
[https://github.com/advisories/GHSA-rfh5-gx7w-h7v7]

Can we get an idea on when these vulnerabilities are expected to be fixed? Thanks in advance!

[Amrooo161]

There's also a Critical CVE GHSA-5423-jcjm-2gpv, Is there any estimate on when this can be resolved ?

[richabanker]

/triage accepted
/assign @rexagod

[mrueg]

Thanks for creating the issue, we do not track vulnerabilities as issues though. The Security process is outlined in https://github.com/kubernetes/kube-state-metrics/blob/main/SECURITY.md Please follow this, if you believe there is a vulnerability.