GoogleCloudPlatform / GoogleCloudPlatform/container-engine-accelerators
Multiple high severity CVEs on latest nvidia-device-plugin(v1.0.20)
Open
- Dominant language
- Go
- Stars
- 252
- Forks
- 184
- Avg merge
- 1h 55m
- Merged PRs (30d)
- 2
Description
We use the latest version of nvidia-device-plugin(v1.0.20) and the following packages report some high vulnerabilities by the sysdig scanner.
1. github.com/prometheus/client_golang: CVE-2022-21698
2. golang.org/x/net : CVE-2021-33194, CVE-2021-44716, CVE-2022-27664, CVE-2022-41723
3. golang.org/x/text: CVE-2021-38561 , CVE-2022-32149
Are there any plans to fix them anytime soon?
Contributor guide
Assessment
This issue has not been assessed yet.