Critical CVE CVE-2024-45337 flagged by aqua scan

[kvijai82]

The following critical CVE is being flagged by Aqua scans:

cve	sev	epss	package	type	version	fixedIn	arch	path
CVE-2024-45337	critical (aqua)	0.045%	golang.org/x/crypto	go (aqua)	0.25.0 (aqua)	0.31.0 (aqua)	amd64	/usr/bin/local-path-provisioner (aqua)

cve sev epss package type version fixedIn arch path
CVE-2024-45337 critical (aqua) 0.045% golang.org/x/crypto go (aqua) 0.25.0 (aqua) 0.31.0 (aqua) amd64 /usr/bin/local-path-provisioner (aqua)

Could this be reviewed to determine if it's an issue? Is this package used in this image? In the go.mod file I don't see this package being used. Thanks!

[derekbit]

Sure. Thanks for raising the CVE.

[derekbit]

Fixed in #472.
Will release soon.