Skip to content

Fix Critical & High Vulnerabilities #788

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
DmitriiRabenok merged 8 commits into from
Jan 22, 2026
Merged

Fix Critical & High Vulnerabilities #788

DmitriiRabenok merged 8 commits into from
Jan 22, 2026

Conversation

@nikhil1697
Copy link
Collaborator

@nikhil1697 nikhil1697 commented Jan 19, 2026 •
edited
Loading

Description

When we scanned kubemarine v0.44.0 we found few vulnerabilities and need to fix them
*

Solution

  1. Updated Helm from v1.19.0 to v1.19.5
  2. Updated Base image from golang:1.24 to golang:1.25.

Checklist

  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • There is no breaking changes, or migration patch is provided
  • Integration CI passed
  • Unit tests. If Yes list of new/changed tests with brief description
  • There is no merge conflicts

Unit tests

Indicate new or changed unit tests and what they do, if any.

@nikhil1697 nikhil1697 marked this pull request as draft January 19, 2026 07:52
@nikhil1697 nikhil1697 marked this pull request as ready for review January 19, 2026 08:17
theboringstuff
theboringstuff reviewed Jan 20, 2026
View reviewed changes
@andrewluckyguy
Copy link
Collaborator

andrewluckyguy commented Jan 20, 2026 •
edited
Loading

The default version should also be updated in:
https://github.com/Netcracker/KubeMarine/blob/vulnerability_fix_v0.44.0/documentation/Installation.md?plain=1#L1120
https://github.com/Netcracker/KubeMarine/blob/vulnerability_fix_v0.44.0/documentation/Installation.md#kubernetes-version

@DmitriiRabenok DmitriiRabenok merged commit 175347f into main Jan 22, 2026
31 checks passed
@github-actions github-actions bot locked and limited conversation to collaborators Jan 22, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@theboringstuff theboringstuff theboringstuff approved these changes

@DmitriiRabenok DmitriiRabenok DmitriiRabenok approved these changes

@pranavcracker pranavcracker Awaiting requested review from pranavcracker

@andrewluckyguy andrewluckyguy Awaiting requested review from andrewluckyguy

Assignees

@DmitriiRabenok DmitriiRabenok

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

5 participants

@nikhil1697 @andrewluckyguy @theboringstuff @DmitriiRabenok