search

DelineaXPM / terraform-provider-dsv

A Terraform Provider for Delinea DevOps Secrets Vault
https://delinea.com/products/devops-secrets-management-vault
MIT License
6 stars 3 forks source link

chore(deps): update ⬆️ golang module golang.org/x/net to v0.7.0 #49

Closed mend-for-github-com[bot] closed 1 year ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
golang.org/x/net indirect minor v0.1.0 -> v0.7.0

GitHub Vulnerability Alerts

CVE-2022-41723

A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.

CVE-2022-41721

A request smuggling attack is possible when using MaxBytesHandler. When using MaxBytesHandler, the body of an HTTP request is not fully consumed. When the server attempts to read HTTP2 frames from the connection, it will instead be reading the body of the HTTP request, which could be attacker-manipulated to represent arbitrary HTTP2 requests.

Release Notes

golang/net ### [`v0.7.0`](https://togithub.com/golang/net/compare/v0.6.0...v0.7.0) [Compare Source](https://togithub.com/golang/net/compare/v0.6.0...v0.7.0) ### [`v0.6.0`](https://togithub.com/golang/net/compare/v0.5.0...v0.6.0) [Compare Source](https://togithub.com/golang/net/compare/v0.5.0...v0.6.0) ### [`v0.5.0`](https://togithub.com/golang/net/compare/v0.4.0...v0.5.0) [Compare Source](https://togithub.com/golang/net/compare/v0.4.0...v0.5.0) ### [`v0.4.0`](https://togithub.com/golang/net/compare/v0.3.0...v0.4.0) [Compare Source](https://togithub.com/golang/net/compare/v0.3.0...v0.4.0) ### [`v0.3.0`](https://togithub.com/golang/net/compare/v0.2.0...v0.3.0) [Compare Source](https://togithub.com/golang/net/compare/v0.2.0...v0.3.0) ### [`v0.2.0`](https://togithub.com/golang/net/compare/v0.1.0...v0.2.0) [Compare Source](https://togithub.com/golang/net/compare/v0.1.0...v0.2.0)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.