[Enhancement]: CRITICAL Vulnerability in stdlib related to net/netip

[A-Jatin]

Is there an existing issue for this?

• I have searched the existing issues

What would you like to be added?

I was testing for vulnerabilities before deploying milvus in our environment and found a critical issue(see image below)

However this issue is fixed with latest version of stdlib but milvus doesnt support that currently. Can we please have an update for this to resolve this vulnerability?

Why is this needed?

To deploy milvus without any CRITICAL vulnerabilities.

Anything else?

Using Trivy - https://github.com/aquasecurity/trivy for vulnerability scan of the container.

[xiaofan-luan]

@shaoting-huang
seems that we need 1.21.11 for 2.4

[A-Jatin]

this is still causing the issue - milvusdb/milvus-config-tool v0.3.0

[xiaofan-luan]

@zwd1208
can you please help on fix the CVE

[zwd1208]

ok, @haorenfsa will fix it soon.

[haorenfsa]

/assign

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
Rotten issues close after 30d of inactivity. Reopen the issue with /reopen.