Vulnerability Found in 0.11.2 Version

[josephlim75]

Just wanted to check if anyone is aware there are CVEs found during trivy scan for the following package. Will it be resolved anytime soon ?

Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 2, HIGH: 0, CRITICAL: 0)
┌──────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬──────────────────────────────────────────────┐
│     Library      │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                    Title                     │
├──────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼──────────────────────────────────────────────┤
│ golang.org/x/net │ CVE-2023-39325 │ MEDIUM   │ fixed  │ v0.8.0            │ 0.17.0        │ rapid stream resets can cause excessive work │
│                  │                │          │        │                   │               │ (CVE-2023-44487)                             │
│                  │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2023-39325   │
│                  ├────────────────┤          │        │                   ├───────────────┼──────────────────────────────────────────────┤
│                  │ CVE-2023-3978  │          │        │                   │ 0.13.0        │ Cross site scripting                         │
│                  │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2023-3978    │
└──────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴──────────────────────────────────────────────┘