Need upgraded versions of "golang.org/x/net","jinja2","requests" packages to resolve security vulnerabilities #125
Description
Hi, we are currently using operator-sdk v1.37.0 as the base image to build our operator. During our Security scan, below vulnerabilities were found.
| Package | CVE | Current version | Required upgraded version | |
|---|---|---|---|---|
| golang.org/x/net | CVE-2024-45338 | v0.29.0 | v0.33.0 | |
| jinja2 | CVE-2024-56201, CVE-2024-56326 | v3.1.4 | v3.1.5 | |
| requests | CVE-2024-35195 | v2.32.0 |
Can we know by when the new version of operator-sdk will be released with the upgraded versions of these packages?