Unmitigated MEDIUM CVEs in 2.15.0

[adityamohan29]

Hello everybody,
Our security scans detected some vulnerabilities,

[https://github.com/advisories/GHSA-r9fv-h47r-823f]
[https://github.com/advisories/GHSA-cq92-4vj3-mcq8]
[https://github.com/advisories/GHSA-6ggv-mmg2-jf4r]
[https://github.com/advisories/GHSA-p9w4-8hh8-crcx]

Can we get an idea on when these vulnerabilities are expected to be fixed? Thanks in advance!

[liangyuanpeng]

Repeat:

• A couple of CVEs are present in release 2.15.0 #2653

[richabanker]

/triage accepted
@rexagod are you able to take a look here? Or suggest someone who might know more about this?

[ezequiel-deluca-gp]

Hi everybody,
Don't forget the issues mentioned on #2653. Not all of them are repeted here:

[https://github.com/advisories/GHSA-hcg3-q754-cr77]
[https://github.com/advisories/GHSA-3wqc-mwfx-672p]
[https://github.com/advisories/GHSA-qxp5-gwg8-xv66]

Thanks!

[Amrooo161]

There's also a Critical CVE GHSA-5423-jcjm-2gpv, Is there any estimate on when this can be resolved ?