Skip to content

security: Upgrade golang.org/x/crypto to remediate CVEs #126

New issue
New issue
Closed
#130
Closed
security: Upgrade golang.org/x/crypto to remediate CVEs#126
#130
Assignees
rebornplusplus

Description

@bpanesar
bpanesar
opened on Mar 8, 2024

Chisel is being reported as containing High Risk Vulnerabilities do to the version of golang.org/x/crypto used in release v0.9.0.

image

golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2
Chisel v0.9.0

Can this please be updated and published as a new release of Chisel?

Activity

  1. rebornplusplus
    self-assigned this
    on Mar 28, 2024

  2. rebornplusplus commented on Apr 3, 2024

    @rebornplusplus
    rebornplusplus
    on Apr 3, 2024

    Raised #130. Thanks for reporting!

  3. niemeyer
    closed this as completedin #130on Apr 8, 2024
  4. niemeyer
    added a commit that references this issue on Apr 8, 2024

    chore: bump golang.org/x/crypto to v0.21.0 (#130)

    91e9dbf
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions