Affected by GO-2024-3010
and 2 other vulnerabilities
GO-2024-3010: CVE-2024-6984 in github.com/juju/juju
GO-2024-3040: Juju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charm in github.com/juju/juju
GO-2024-3175: Vulnerable juju introspection abstract UNIX domain socket in github.com/juju/juju
Package collect provides a worker that executes the collect-metrics hook
periodically, as long as the workload has been started (between start and
stop hooks). collect-metrics executes in its own execution context, which is
restricted to avoid contention with uniter "lifecycle" hooks.