The project uses Go v1.24.10, which has a handful of CVEs associated with it. This means that any project that uses this project as a base image has those CVEs reported for it.

The version of Go needs to be updated and a new release should be created.