Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

To fix net vulnerability #901

Closed
wants to merge 1 commit into from
Closed

To fix net vulnerability #901

wants to merge 1 commit into from

Conversation

cniackz
Copy link
Contributor

@cniackz cniackz commented Apr 13, 2024 •
edited
Loading 

Vulnerability #1: GO-2024-2687
    HTTP/2 CONTINUATION flood in net/http
  More info: https://pkg.go.dev/vuln/GO-2024-2687
  Module: golang.org/x/net
    Found in: golang.org/x/net@v0.22.0
    Fixed in: golang.org/x/net@v0.23.0

@cniackz cniackz self-assigned this Apr 13, 2024
@cniackz cniackz mentioned this pull request Apr 13, 2024
Open
balamurugana
balamurugana reviewed Apr 14, 2024
View reviewed changes
go.mod
@@ -87,7 +87,7 @@ require (
github.com/subosito/gotenv v1.6.0 // indirect
go.uber.org/multierr v1.11.0 // indirect
golang.org/x/exp v0.0.0-20240222234643-814bf88cf225 // indirect
golang.org/x/net v0.22.0 // indirect
golang.org/x/net v0.23.0 // indirect
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
golang.org/x/net v0.23.0 // indirect
golang.org/x/net v0.24.0 // indirect

@Praveenrajmani
Copy link
Collaborator

fixed in https://github.com/minio/directpv/pull/905/files

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@balamurugana balamurugana balamurugana left review comments

@Praveenrajmani Praveenrajmani Awaiting requested review from Praveenrajmani

@harshavardhana harshavardhana Awaiting requested review from harshavardhana

@shtripat shtripat Awaiting requested review from shtripat

Assignees

@cniackz cniackz

Labels
vulnerability
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@cniackz @Praveenrajmani @balamurugana