Found security vulnerability in chartmuseum v0.15.0

[Kiran-38]

Hi,
The chartMuseum binary contains the go.etcd.io/etcd-v3.3.27+incompatible library with is flagged as a security risk and need to update to the latest version 3.4.0 and above available for resolving the issue.

The mentioned library is coming as a derived dependency, as is verified by searching for it in the go.mod file. It is because of this vulnerable library that all the images having even the latest chartMuseum binary baked into them are failing the security scans.

[nerdeveloper]

Hello @Kiran-38 thank you for reporting this. @cbuto, please, I can see we have this showing in our scans:

https://github.com/helm/chartmuseum/security/dependabot/22

[nerdeveloper]

This issue is being tracked here: #568