Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Security vulnerabilities in solbuild detected by Dependabot in golang mods #64

Closed
TraceyC77 opened this issue Dec 28, 2023 · 2 comments
Closed

Security vulnerabilities in solbuild detected by Dependabot in golang mods #64

TraceyC77 opened this issue Dec 28, 2023 · 2 comments
Labels
security
Milestone
1.6.0

Comments

@TraceyC77
Copy link
Contributor

getsolus / solbuild

Known security vulnerabilities detected
Dependency golang.org/x/crypto Version < 0.17.0 Upgrade to ~> 0.17.0
Defined in go.mod
Vulnerabilities
CVE-2023-48795 Moderate severity

https://github.com/getsolus/solbuild/security/dependabot/7
@TraceyC77
Copy link
Contributor Author

There's an additional one now

Known security vulnerabilities detected
Dependency golang.org/x/crypto Version < 0.17.0 Upgrade to ~> 0.17.0
Defined in go.mod
Vulnerabilities
CVE-2023-48795 Moderate severity
Dependency github.com/cloudflare/circl Version < 1.3.7 Upgrade to ~> 1.3.7
Defined in go.mod
Vulnerabilities
GHSA-9763-4f94-gfch High severity

@TraceyC77 TraceyC77 changed the title Security vulnerability in solbuild detected by Dependabot Security vulnerabilities in solbuild detected by Dependabot in golang mods Jan 9, 2024
@silkeh silkeh added this to the 1.5.7 milestone Jan 28, 2024
@silkeh silkeh modified the milestones: 1.5.7, 1.6.0 Feb 28, 2024
@silkeh
Copy link
Member

silkeh commented Feb 28, 2024

Resolved in #73.

@silkeh silkeh closed this as completed Feb 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security
Projects
None yet
Milestone
1.6.0
Development

No branches or pull requests
2 participants
@silkeh @TraceyC77