Longw/remove win rexml (#1341)

wanlonghenry · web-flow · commit 6b25c9d06f5f · 2025-01-15T13:10:15.000-08:00
* remove rexml in win
* update to remove rexml by force as all dependency are for development
diff --git a/.trivyignore b/.trivyignore
@@ -1,5 +1,9 @@
 #telegraf CRITICAL
 CVE-2024-41110
+CVE-2024-45337
+
+#telegraf HIGH
+CVE-2024-45338
 
 #telegraf MEDIUM
 CVE-2024-35255
diff --git a/kubernetes/windows/Dockerfile b/kubernetes/windows/Dockerfile
@@ -31,6 +31,7 @@ RUN refreshenv \
 && gem install gyoku -v 1.3.1 \
 && gem install ipaddress -v 0.8.3 \
 && gem install jwt -v 2.7.1 \
+&& gem uninstall rexml -v 3.2.5 --force \
 && gem sources --clear-all
 
 # Remove gem cache and chocolatey
