chore(findings): hashicorp/vault/vault

Ghost User
2022-06-01T21:16:39Z

## Summary hashicorp/vault/vault has 5 new findings discovered during continuous monitoring. id | source | severity | package -- | ------ | -------- | ------- CVE-2020-7218 | anchore_cve | High | github.com/hashicorp/nomad/api-v0.0.0-20211006193434-215bf04bc650 CVE-2020-7956 | anchore_cve | Critical | github.com/hashicorp/nomad/api-v0.0.0-20211006193434-215bf04bc650 CVE-2021-3283 | anchore_cve | High | github.com/hashicorp/nomad/api-v0.0.0-20211006193434-215bf04bc650 CVE-2021-37218 | anchore_cve | High | github.com/hashicorp/nomad/api-v0.0.0-20211006193434-215bf04bc650 PRISMA-2022-0164 | twistlock_cve | Medium | github.com/aws/aws-sdk-go-v1.37.19 VAT: https://vat.dso.mil/vat/container/19461?branch=master
More information can be found in the failed pipeline located here: https://repo1.dso.mil/dsop/hashicorp/vault/vault/-/jobs/12260303 ## Tasks Contributor: - [x] Provide justifications for findings in the [VAT](https://vat.dso.mil) ([docs](https://repo1.dso.mil/dsop/dccscr/-/blob/master/pre-approval/vat.md)) - [x] Apply the ~"Approval" label to this issue and wait for feedback Iron Bank: - [ ] Review findings and justifications - [ ] Send approval request to Authorizing Official - [ ] Close issue after approval from Authorizing Official > Note: If the above approval process is rejected for any reason, the `Approval` label will be removed and the issue will be sent back to `Open`. Any comments will be listed in this issue for you to address. Once they have been addressed, you **must** re-add the `Approval` label. ## Questions? Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add `/cc @ironbank-notifications/onboarding`. Additionally, Iron Bank hosts an [AMA](https://www.zoomgov.com/meeting/register/vJIsf-ytpz8qHSN_JW8Hl9Qf0AZZXSCSmfo) working session every Wednesday from 1630-1730EST to answer questions.