-
Notifications
You must be signed in to change notification settings - Fork 247
Open
Labels
lifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale.Denotes an issue or PR has remained open with no activity and has become stale.needs-triageIndicates an issue or PR lacks a `triage/*` and requires one.Indicates an issue or PR lacks a `triage/*` and requires one.
Description
Hello,
Our ACS scan reports critical CVEs in odo v3.16.1:
- CVE-2024-41110 —
github.com/docker/docker v20.10.24, fixed in23.0.15 - CVE-2025-21613 / 21614 —
github.com/go-git/go-git/v5 v5.11.0, fixed in5.13.0
Binary source:
https://developers.redhat.com/content-gateway/rest/mirror/pub/openshift-v4/clients/odo/v3.16.1/odo-linux-amd64
Could you please update these dependencies and publish a new odo release that includes the security fixes?
Thanks!
Metadata
Metadata
Assignees
Labels
lifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale.Denotes an issue or PR has remained open with no activity and has become stale.needs-triageIndicates an issue or PR lacks a `triage/*` and requires one.Indicates an issue or PR lacks a `triage/*` and requires one.
Type
Projects
Status
No status