prometheus-community/json_exporter

New release with security fixes

taraspos opened this issue · 2 comments

Hello!

Latest version (0.6.0) of json_exporter 1 has bunch of dependencies with reported security vulnerabilities 2.

image

Would be great to prepare new version with those fixes if possible.
Thanks.

Footnotes

  1. 0.6.0 / 2023-06-06

  2. https://artifacthub.io/packages/helm/prometheus-community/prometheus-json-exporter/0.11.0?modal=security-report

@SuperQ any chance you could cut a new release? Vulnerabilities are piling up in existing image.

image

Please do not report raw vulnerability scanner results. They are prone to false positives and cause the Prometheus team toil in verifying. Please verify vulnerability reports and include specific details as to which components are directly exploitable.