Repository navigation
Critical Vulnerability in the rcon-cli binary #39
Description
Activity
- changed the title
[-]Critical Vulnerability when including the rcon-cli package in Container[/-][+]Critical Vulnerability in the rcon-cli binary[/+]on Jan 27, 2024 Since this is a standard go library, the solution should be to simply upgrade go in the build.yml workflow and rebuild the binary if i'm not mistaken.
+1 on this.
Hey @outdead - Now its 3 critical and 18 high CVEs in only that package.
Can you please share an eta on when this will be fixed?
@thijsvanloef FYI
Reacted by Thijs van Loef
Hi! first of all, thank you for creating this package, i've included it by default in my Palworld docker container. I did however find something worth noting.
The binary uses stdlib v1.19.3 which includes multiple Critical and High vulnerabilities.
Would it be possible to provide a release with the stdlib updated to a more recent version?
Thanks in advance