confluentinc/cp-schema-registry:7.1.1 has vulnerabilities. 7.2 isn't yet uploaded.

[abhinavbakaya]

We are using the below Dockerfile to do a dnf upgrade on the image confluentinc/cp-schema-registry:7.1.1 and then we are using the built image to run schema registry on Kubernetes.

FROM confluentinc/cp-schema-registry:7.1.1
USER root
RUN dnf upgrade -y
USER appuser

Even after that, I am being continuously asked by my organisation's Security Team to remove the vulnerabilities.
CVE-2020-36518
PRISMA-2021-0213
CVE-2022-24329

Please help.

[janjwerner-confluent]

Thank you for raising this issue. The CVEs are addressed in the latest release 7.1.3.