[BUG][SECURITY] v8.2.0 images flagged with Go stdlib CVEs — bump Go toolchain to 1.24.8+

[sharath-reddy-baddam]

What happened:
Security scanning of external‑snapshotter v8.2.0 container images (e.g., registry.k8s.io/sig-storage/snapshot-controller:v8.2.0 and registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0) reports multiple vulnerabilities in the Go standard library.
Impacted CVEs (as reported by scanners):

CVE‑2025‑61724
CVE‑2025‑61723
CVE‑2025‑58189
CVE‑2025‑58188
CVE‑2025‑58187
CVE‑2025‑47912
CVE‑2025‑58185
CVE‑2025‑61727
CVE‑2025‑61729

These are Go stdlib vulnerabilities, not issues in external‑snapshotter business logic. The fix is to rebuild binaries with a patched Go toolchain.
The Go security team states these issues are addressed in Go 1.24.8 (and 1.25.2).
What you expected to happen:

How to reproduce it:

Anything else we need to know?:

Environment:

• Driver version:
• Kubernetes version (use kubectl version):
• OS (e.g. from /etc/os-release):
• Kernel (e.g. uname -a):
• Install tools:
• Others:

[sharath-reddy-baddam]

Any update?

[xing-yang]

We are addressing this issue with this PR: #1393

[sharath-reddy-baddam]

@xing-yang
We have identified multiple new vulnerabilities in sig-storage-snapshot-controller v8.4.0, including:
CVE-2026-39883, CVE-2026-32289, CVE-2026-32283, CVE-2026-33811, CVE-2026-27139, CVE-2026-25679, CVE-2026-27142, CVE-2026-39836, CVE-2026-39820, CVE-2026-39826, CVE-2026-42499, CVE-2026-39823, CVE-2026-32280, CVE-2026-33814, and CVE-2026-32281.
These vulnerabilities may pose potential security risks to snapshot management and storage operations within the cluster. A detailed assessment is required to evaluate their impact on our environments (DEV/QA/PROD), identify any exposed components, and determine the necessary remediation or upgrade actions to ensure compliance and security.