CVEs discovered from different releases

[jingxu97]

Is this a BUG REPORT or FEATURE REQUEST?:

Uncomment only one, leave it on its own line:

/kind bug

/kind feature

What happened:

name: vsphere-csi-driver
tag: v3.3.1-gke.2
cves:

• id: CVE-2024-3177
  severity: LOW
  type: GO
  package: k8s.io/kubernetes
  file_location: '/usr/bin/vsphere-csi '
  affected_version: 1.27.10
  fixed_version: 1.27.13
  false_positive: false
• id: CVE-2024-5321
  severity: LOW
  type: GO
  package: k8s.io/kubernetes
  file_location: '/usr/bin/vsphere-csi '
  affected_version: 1.27.10
  fixed_version: 1.27.16
  false_positive: false

What you expected to happen:

How to reproduce it (as minimally and precisely as possible):

Anything else we need to know?:

Environment:

• csi-vsphere version:
• vsphere-cloud-controller-manager version:
• Kubernetes version:
• vSphere version:
• OS (e.g. from /etc/os-release):
• Kernel (e.g. uname -a):
• Install tools:
• Others: