-
Bug
-
Resolution: Done
-
Normal
-
4.12
-
None
-
Low
-
None
-
CNF RAN Sprint 230
-
1
-
False
-
-
There are a few of Dependabot alert in Github for hw-event-proxy regarding message-parser.
https://github.com/redhat-cne/hw-event-proxy/security/dependabot/7
https://github.com/redhat-cne/hw-event-proxy/security/dependabot/8
https://github.com/redhat-cne/hw-event-proxy/security/dependabot/9
The python library certifi, wheel and setuptools needs to be upgrade to newer versions to prevent spyware and DOS attacks. Since the message-parser app is not exposed to outside of hw-event-proxy pod, it is not vulnerable to any direct security threat. As such, there is no need to fix previous releases. A fix in current release to remove the Github warnings should be sufficient.