SUMO-242708: Upgrading module dependencies (x/net, protobuf, go-getter) to address CVE

SumoLogic / terraform-provider-sumologic

Terraform provider for Sumo Logic

https://www.terraform.io/docs/providers/sumologic/

Mozilla Public License 2.0

40 stars 57 forks source link

SUMO-242708: Upgrading module dependencies (x/net, protobuf, go-getter) to address CVE #662

Closed adisuj closed 5 months ago

adisuj commented 5 months ago

Customer escalation showed vulnerability in x/net and protobuf dependencies. When checking dependabot, go-getter and go-retryablehttp had critical vulnerabilities as well.

Had trouble running local tests so was suggested to form PR and run tests through it