High and medium vulnerabilities in CIROH image

[arpita0911patel]

Context

We are seeing two high and two medium vulnerabilities in CIROH image based on quay security scanner.

Quay Security Scanner has detected 4 vulnerabilities.
2 High-level vulnerabilities.
2 Medium-level vulnerabilities.

Package: ujson, httplib2, numpy

Proposal

No response

Updates and actions

No response

[colliand]

Thanks for communicating in the open @arpita0911patel. Please note the shared responsibility model explains how 2i2c and AWI/CIROH share tasks. While issues within the software environment should be assigned to CIROH/AWI, we at 2i2c are here to assist you and your community. 2i2c's engineering team, including @sgibson91, has a more-than-full assignment of tasks across a variety of communities so can't take on GitHub issue assignments outside our intended scope.

[arpita0911patel]

Thank you James for sharing this shared responsibility model details. I wasn't aware on that.