looking for CVE-2021-3918 fix

[teja1702]

Hi Everyone,

I'm currently using GCP Microdemo application in my cluster to perform couple of health checks. And I'm using v0.3.6 images for all services images. I'm performing trivy scanning to identify vulnerabilities. I'm getting CVE-2021-3918 for currency service image and this is related to json-schema.

Any suggestions !!!

[teja1702]

[bourgeoisor]

Hello, thank you for this finding! We are always on the look-out for all CVEs and aim to prioritize those who are critical to the security and well-being of our sample applications. For that purpose, we've recently enabled Renovate and are in the process of updating dependencies to clear these potential security breaches in our sample application. I will be closing this issue in favour of the all-encompassing #728