Dependabot Vulnerabilities identified in scan of v1.10.2

[shikari7]

Bug description

Dependabot is reporting the attached vulnerabilities in Podman Desktop 1.10.2.

Operating system

all

Installation Method

Other

Version

1.10.2

Steps to reproduce

Dependabot scans of install tool - see attachment for output

Relevant log output

No response

Additional context

No response

[shikari7]

Podman Desktop Vulnerabilities 1.10.2.xlsx

[benoitf]

dependabot report is part of https://github.com/containers/podman-desktop/security no need to have dedicated issues for that

[shikari7]

Hey @benoitf thanks for that info - these findings from Dependabot have been present in the last several released versions of Podman Desktop - what is the process for remediating these as part of the release process?

These findings are impeding use of Podman Desktop in highly secure environments.

[shikari7]

hi @benoitf sorry to bother you, can you help me understand how to help get these Dependabot findings remediated? Thank you.