Open
Description
Currently our vulnerability scanner is detecting CVE-2024-41110 in the helm-push plugin and is preventing me to use this plugin in our environment.
As far as I can see there was a dependabot PR ( #203 ) long time ago (it is somewhat outdated now though).
Is there anything preventing to bump the docker dependency to a never, not affected version?
Thank you!
Metadata
Metadata
Assignees
Labels
No labels