Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump up GO to 1.20.5 due to security vulnerabilities #1701

Open
pranay-harness opened this issue Jun 19, 2023 · 2 comments
Open

Bump up GO to 1.20.5 due to security vulnerabilities #1701

pranay-harness opened this issue Jun 19, 2023 · 2 comments
Labels
bug v4

Comments

@pranay-harness
Copy link

pranay-harness commented Jun 19, 2023 •
edited
Loading

Version of yq: 4.34.1

Current GO version used: 1.20.4

Critical CVE's:
CVE-2023-29405
CVE-2023-29402
CVE-2023-29404
CVE-2023-29403

Scanner: prismacloud (twistlock)

Fix: Upgrade GO to 1.20.5 and above
@raghuAtWings
Copy link

Upvoting, can this be prioritized ?

@bitdivine
Copy link

I think this issue can be closed. The current go version used by yq appears to be 1.21: https://github.com/mikefarah/yq/blob/master/go.mod

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug v4
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@bitdivine @raghuAtWings @pranay-harness