any fix for CVE-2019-20444 & CVE-2019-20445 for gcp adservice image

[teja1702]

Hi Everyone,

I'm currently using GCP Microdemo application in my cluster to perform couple of health checks. And I'm using v0.3.6 images for all services images. I'm performing trivy scanning to identify vulnerabilities. I have fixed couple of CVEs where [https://github.com/advisories/GHSA-cqqj-4p63-rrmm] & [https://github.com/advisories/GHSA-p2v9-g2qv-p635] I'm unable to figure out fix for adservice image. And this CVEs are related to io.netty:netty-handler package.

Can anyone suggest regarding the issue !!

[bourgeoisor]

Hello, thank you for this finding! We are always on the look-out for all CVEs and aim to prioritize those who are critical to the security and well-being of our sample applications. For that purpose, we've recently enabled Renovate and are in the process of updating dependencies to clear these potential security breaches in our sample application. I will be closing this issue in favour of the all-encompassing #728