v1.31.1 showing HIGH vulnerability CVE-2023-44487

[mitchellmaler]

v1.31.1 is using the net package that has the vulnerability CVE-2023-44487. This requires upgrading Golang and the net package to resolve the CVE.

[tmjd]

Thank you for reporting this. You've reported this as HIGH but the CVE is Moderate. It looks like the tool you're using reports the vulnerability as HIGH so I guess that's why you've reported it this way.

Since the operator's primary function does not act as a server I don't think this issue very critical to the operator. We should still look at getting this updated though.