Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(sec): CVE-2022-41721 #8633

Merged
merged 3 commits into from
Jan 28, 2023
Merged

fix(sec): CVE-2022-41721 #8633

merged 3 commits into from
Jan 28, 2023

Conversation

skrdgraph
Copy link
Contributor

@skrdgraph skrdgraph commented Jan 28, 2023

Problem

Package: golang.org/x/net
Installed Version: v0.0.0-20220906165146-f3363e06e74c
Vulnerability CVE-2022-41721
Severity: HIGH
Link: CVE-2022-41721

Solution

Fixed Version: 0.1.1-0.20221104162952-702349b0e862


This PR also address CVE-2022-32149

@coveralls
Copy link

coveralls commented Jan 28, 2023

Coverage Status

Coverage: 66.871% (-0.2%) from 67.076% when pulling 2384bc0 on skrdgraph/CVE-2022-41721 into 5fc279c on main.

@skrdgraph skrdgraph merged commit 09a8e45 into main Jan 28, 2023
@skrdgraph skrdgraph deleted the skrdgraph/CVE-2022-41721 branch January 28, 2023 11:09
all-seeing-code pushed a commit that referenced this pull request Feb 8, 2023
## Problem
 Package: golang.org/x/net
Installed Version: v0.0.0-20220906165146-f3363e06e74c
Vulnerability CVE-2022-41721
Severity: HIGH
Link: [CVE-2022-41721](https://avd.aquasec.com/nvd/cve-2022-41721)

## Solution
Fixed Version: 0.1.1-0.20221104162952-702349b0e862 

---

This PR also address
[CVE-2022-32149](https://avd.aquasec.com/nvd/cve-2022-32149)
all-seeing-code pushed a commit that referenced this pull request Feb 8, 2023
## Problem
 Package: golang.org/x/net
Installed Version: v0.0.0-20220906165146-f3363e06e74c
Vulnerability CVE-2022-41721
Severity: HIGH
Link: [CVE-2022-41721](https://avd.aquasec.com/nvd/cve-2022-41721)

## Solution
Fixed Version: 0.1.1-0.20221104162952-702349b0e862 

---

This PR also address
[CVE-2022-32149](https://avd.aquasec.com/nvd/cve-2022-32149)
@MichelDiz MichelDiz added the dgraph Issue or PR created by an internal Dgraph contributor. label Mar 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dgraph Issue or PR created by an internal Dgraph contributor.
Development

Successfully merging this pull request may close these issues.

5 participants