chore(findings): hashicorp/vault/vault

Ghost User
2022-09-21T14:22:03Z

## Summary hashicorp/vault/vault has 5 new findings discovered during continuous monitoring. id | source | severity | package -- | ------ | -------- | ------- GHSA-qv95-g3gm-x542 | anchore_cve | Low | github.com/hashicorp/vault-(devel) CVE-2021-3024 | anchore_cve | Medium | github.com/hashicorp/vault-(devel) CVE-2020-25594 | anchore_cve | Medium | github.com/hashicorp/vault-(devel) GHSA-6239-28c2-9mrm | anchore_cve | Medium | github.com/hashicorp/vault-(devel) CVE-2022-27664 | twistlock_cve | High | go-1.17.13 VAT: https://vat.dso.mil/vat/container/21701?branch=master
More information can be found in the failed pipeline located here: https://repo1.dso.mil/dsop/hashicorp/vault/vault/-/jobs/14416322 ## Tasks Contributor: - [ ] Provide justifications for findings in the [VAT](https://vat.dso.mil) ([docs](https://repo1.dso.mil/dsop/dccscr/-/blob/master/pre-approval/vat.md)) - [ ] Apply the ~"Hardening::Approval" label to this issue and wait for feedback Iron Bank: - [ ] Review findings and justifications - [ ] Send approval request to Authorizing Official - [ ] Close issue after approval from Authorizing Official > Note: If the above approval process is rejected for any reason, the `Approval` label will be removed and the issue will be sent back to `Open`. Any comments will be listed in this issue for you to address. Once they have been addressed, you **must** re-add the `Approval` label. ## Questions? Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add `/cc @ironbank-notifications/onboarding`. Additionally, Iron Bank hosts an [AMA](https://www.zoomgov.com/meeting/register/vJIsf-ytpz8qHSN_JW8Hl9Qf0AZZXSCSmfo) working session every Wednesday from 1630-1730EST to answer questions.