Multiple High and Medium CVEs in kube-bench:v0.6.11 image

[rayandas]

Overview

There are multiple High and Medium CVEs in kube-bench:v0.6.11 image.

What happened?

I ran trivy image aquasec/kube-bench:v0.6.11 Below is the output:

2023-02-08T21:43:44.496+0530	INFO	Vulnerability scanning is enabled
2023-02-08T21:43:44.496+0530	INFO	Secret scanning is enabled
2023-02-08T21:43:44.496+0530	INFO	If your scanning is slow, please try '--security-checks vuln' to disable secret scanning
2023-02-08T21:43:44.496+0530	INFO	Please see also https://aquasecurity.github.io/trivy/v0.36/docs/secret/scanning/#recommendation for faster secret detection
2023-02-08T21:43:47.446+0530	INFO	Detected OS: alpine
2023-02-08T21:43:47.446+0530	INFO	Detecting Alpine vulnerabilities...
2023-02-08T21:43:47.453+0530	INFO	Number of language-specific files: 1
2023-02-08T21:43:47.453+0530	INFO	Detecting gobinary vulnerabilities...

aquasec/kube-bench:v0.6.11 (alpine 3.17.0)

Total: 24 (UNKNOWN: 0, LOW: 0, MEDIUM: 21, HIGH: 3, CRITICAL: 0)

What did you expect to happen:

There shouldn't be any CVE.