kubernetes-secret-generator
Chainguard
5.5
CVSS V3
Status
Impact
Upstream have pinned k8s.io/client-go (and associated modules) to a commit from 2019 in order to maintain compatibility with older versions of kubernetes. Because of significant changes in the module since then, it is not possible to bump the dependency and upstream will need to make code changes
Status
Impact
Govulncheck found vulnerable symbols in Go binaries at the following locations: in kubernetes-secret-generator-3.4.1-r1.apk, at usr/bin/manager, usr/bin/manager.
Status