kube-arangodb 1.2.46 - Security Vulnerabilities

[nnaik25]

We are seeing below vulnerabilities reported for kube-arangodb 1.2.46

[CVE-2024-45336] [stdlib] [1.22.10]
[6.5] [CVE-2016-2781] [coreutils] [9.4-3ubuntu6]
[4.7] [CVE-2024-10041] [libpam0g] [1.5.3-5ubuntu5.1]
[5.9] [CVE-2024-2236] [libgcrypt20] [1.10.3-2build1]
[4.4] [CVE-2025-22870] [golang.org/x/net] [v0.23.0]

Tool used is aqua scan

We are using below docker image

https://hub.docker.com/r/arangodb/kube-arangodb/tags

docker pull arangodb/kube-arangodb:1.2.46

Can you please comment on whether there a plan to fix vulnerabilities on top on version 1.2.46

Let me know if any more info is required. Will update this ticket accordingly

[ajanikow]

Hello @nnaik25 !

Please follow it in the second created ticket: #1866 (issue is the same, as we use same base image and dependencies are only updated on the build time)

Best Regards,
Adam.