CVE 2024-24557 vulnerability detected

[sohumh]

Before you start please confirm the following.

• Yes, I've searched similar issues on GitHub.
• Yes, I've checked whether this issue is covered in the Portainer documentation or knowledge base.

Problem Description

I am seeing the security vulnerability 2024-24557 existing in the portainer/kubectl-shell package, which is pulled from here

Expected Behavior

There shouldn't be a security vulnerability.

Actual Behavior

There currently is.

Steps to Reproduce

1. The moby version is out of date.

Portainer logs or screenshots

No response

Portainer version

2.20.1

Portainer Edition

Business Edition (BE/EE) with 5NF / 3NF license

Platform and Version

Docker

OS and Architecture

Ubuntu 22.04, AMD64

Browser

Google Chrome 114.0

What command did you use to deploy Portainer?

Didn't deploy, just detected the vulnerability.

Additional Information

This is very urgent for us at Scale AI, so please let me know when a fix can be uploaded.

[jamescarppe]

Thanks for opening the issue - we are already tracking this CVE for resolution in our next patch release.