Below are vulnerabilities that were detected in the traefik(v2.9.5) image by the trivy vulnerability scanner.
Component: consul, version: v1.10.4, CVE-2021-41803 & CVE-2022-40716
Component: http://golang.org/x/text, version: v0.3.7, CVE-2022-32149
I did see other CVE's in Trefik's forum and Github related to Consul and the Go Text library marked as a false positive but I didn't see a mention of these specific CVEs.
Could someone please confirm if these are false positives or not?