-
## CVE-2024-28122 - Medium Severity Vulnerability
Vulnerable Library - github.com/lestrrat-go/jwx/v2-v2.0.8
Library home page: https://proxy.golang.org/github.com/lestrrat-go/jwx/v2/@v/v2.0.8.zip
P…
-
Also have to change references to the branch in .travis.yml, README, and CONTRIBUTING. Double check any other markdown files as well - sometimes links have the branch name in them.
-
Also have to change references to the branch in .travis.yml, README, and CONTRIBUTING. Double check any other markdown files as well - sometimes links have the branch name in them.
-
The handlers in this file https://github.com/xmidt-org/argus/blob/main/store/handler.go#L40 could be configured with gokit's `ServerErrorHandler` option to at least log all the errors.
joe94 updated
2 years ago
-
https://github.com/xmidt-org/caduceus/blob/453f1410b1f109beeac7d9141eb20df4c86292d6/senderWrapper.go#L132
With argus, we don't need the undertaker anymore and should delete webhooks in our update f…
-
https://github.com/xmidt-org/tr1d1um/blob/master/translation/errors.go#L16
^ An example of an error message that's not helpful at all with respect to which part of the request was invalid.
joe94 updated
4 years ago
-
The `wrp-go` library will be adding a validate function/utility that will need to be called after the WRP is converted into a struct by Scytale.
Why?
Other components down stream can trust the i…
-
https://github.com/xmidt-org/caduceus/blob/94286dd77ba28343644de15c5837fcab81255216/outboundSender.go#L519
Instead of re-encoding the wrp, we should just pass along the original bytes that caduceus…
-
Dependent on https://github.com/xmidt-org/wrp-go/issues/53.
If the device sends Talaria a WRP with an empty Device ID field, Talaria should fill it with what it believes to be the Device ID of that…
-
Caduceus will deliver events using https with an ip address e.g. https://96.118.136.239:443/api/v3/notify. This should fail as the cert won't match an ip address. Or, this should fail at the registra…