Vulnerability CVE-2024-45337 found in Ekuiper image

[OlgasAcc]

Environment:

• eKuiper version (e.g. 1.3.0): 1.4.6-alpine
• OS (e.g. cat /etc/os-release): Ubuntu, MacOS

What happened and what you expected to happen:

The critical vulnerability has been reported by our Aqua scanner, could you please upgrade the problematic dependency for v1.x and 2.x?
https://github.com/lf-edge/ekuiper/security/advisories/GHSA-g9m3-63ph-99c5

NVD URL : https://nvd.nist.gov/vuln/detail/CVE-2024-45337
Fix Version : 0.31.0

Thanks

[ngjaying]

Hi @OlgasAcc , thanks for rasing this up. Would you possible to help fix this problem in master-1.14 branch? Due to resource limit, we generally cannot maintain too many versions.

[OlgasAcc]

Hi @ngjaying sure, this is a PR: #3447. Could you please review?