New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE Vulnerability CVE-2023-3978 in dependency #135

Closed

luzemail opened this issue Oct 5, 2023 · 1 comment · Fixed by #137

Assignees

Labels

luzemail commented Oct 5, 2023

In go.mod i see this dependency
golang.org/x/net v0.7.0 // indirect

this version is affected by CVE-2023-3978

I believe that updating golang.org/x/text v0.7.0 should solve this

Contributor

samcoe commented Oct 5, 2023

@luzemail Thanks for opening this, I am working to resolve it for our next release 👍

samcoe self-assigned this

samcoe mentioned this issue

Update dependencies to address security vulnerability #137

Merged

samcoe added the enhancement label

samcoe closed this as completed in #137

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment