Skip to content

Update github.com/leodido/go-urn to v1.2.1 #797

@nfoecking

Description

@nfoecking

Hello,

my project uses your library as a dependency. When doing a security test using trivy (https://github.com/aquasecurity/trivy), I found an issue in your library. You use an old version of github.com/stretchr/testify that uses an old version of github.com/leodido/go-urn which contains a security issue because it uses an old version of gopkg.in/yaml.v2-2.2.2 that has a security issue (see https://nvd.nist.gov/vuln/detail/CVE-2019-11254).

Would it be possible to update the dependency to v1.2.1 and release a new version?

Best regards
Niklas

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions