k8s.io/apimachinery/pkg/util/runtime HIGH CVE

[vrumiantsev]

Our security team is flagging the current datadog agent image contains vulnerability with HIGH severity:

  High severity vulnerability found in k8s.io/apimachinery/pkg/util/runtime
  Description: Denial of Service (DoS)
  Info: https://security.snyk.io/vuln/SNYK-GOLANG-K8SIOAPIMACHINERYPKGUTILRUNTIME-8367153
  Introduced through: k8s.io/apimachinery/pkg/util/[email protected]
  From: k8s.io/apimachinery/pkg/util/[email protected]
  Fixed in: 0.29.0-alpha.3, 1.29.0-alpha.3

Our corporate policy is to address High and Critical CVEs within 90 days of a released fix. Since fix released long time back(more than a year ago), could you please work on a remediation?

[pgimalac]

👋 Hello, thanks for the report, this should be fixed as of 7.61.0 which was released earlier today.
Feel free to re-open otherwise.