CVE-2024-6923 is present in aws-efs-csi-driver:v2.1.3

[shashank-shridhar]

There are multiple CVEs related to Python and Python3 where the fix version is reported to be 3.9.20-1.amzn2023.0.2.
Currently we are seeing that the version is 3.9.16-1.amzn2023.0.9.

Is there any plan to remediate these vulnerabilities? Thanks in advance!

[sbstn-dev]

AWS Security Inspector reported:

CVE-2024-6232 - python3, python3-libs
CVE-2024-8088 - python3, python3-libs
CVE-2023-27043 - python3, python3-libs
CVE-2024-6923 - python3, python3-libs
CVE-2024-4032 - python3, python3-libs
CVE-2024-7592 - python3, python3-libs

Installed version / Fixed version
0:3.9.16-1.amzn2023.0.9 / 0:3.9.20-1.amzn2023.0.2

CVE-2020-8561 - k8s.io/kubernetes
CVE-2020-8562 - k8s.io/kubernetes

Installed version / Fixed version
0:v1.28.15 / Not available

CVE-2024-45338 - golang.org/x/net

Installed version / Fixed version
0.25.0 / 0.33.0