CVE-2022-1996, CVE-2023-39325, CVE-2022-21698, CVE-2023-44487, SNYK-GOLANG-GITHUBCOMEMICKLEIGORESTFULV3-2435654, GHSA-m425-mq94-257g, CVE-2023-45142, CVE-2019-3826, CVE-2023-3978

[maochuanli]

What would you like to be added:

Fix vulnerabilities issues.

Why is this needed:

/kind feature

[dgrisonnet]

/triage accepted

[cpanato]

this issue does not help much, i know there is a couple of cves to fix, this this should be written in a little better way

[ricardoapl]

I believe most (if not all) of these don't affect https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.7.1

Should we close this issue?

Also CVE-2019-3826 doesn't affect metrics-server, was withdrawn because it doesn't apply to the Prometheus go package

Perhaps we can use VEX in the future to communicate this to users instead

#1499

[k8s-triage-robot]

This issue has not been updated in over 1 year, and should be re-triaged.

You can:

• Confirm that this issue is still relevant with /triage accepted (org members only)
• Close this issue with /close

For more details on the triage process, see https://www.kubernetes.dev/docs/guide/issue-triage/

/remove-triage accepted