search

airbrake / gobrake

Airbrake notifier for Golang
https://docs.airbrake.io/docs/platforms/go-lang
MIT License
104 stars 42 forks source link

Fix HIGH severity level vulnerability `CVE-2021-23772` #345

Closed PrintlnPan closed 1 year ago

PrintlnPan commented 1 year ago

gobrake depends on github.com/kataras/iris package v12.1.8 release version now, but it has a HIGH severity level vulnerability CVE-2021-23772. Do we plan to upgrade the github.com/kataras/iris to fix the vulnerability?

chimanjain commented 1 year ago

The plan is to wait for the next stable release of github.com/kataras/iris/v12 as the latest release is in beta stages i.e v12.2.0-beta6.

PrintlnPan commented 1 year ago

I understand that beta releases always come with uncertain bugs. But v12.2.0 it's in the works for two years since the first alpha, and we are not sure when exactly it will release a stable version. it's possible to upgrade to 12.2.0-alpha8 of patched versions first?

chimanjain commented 1 year ago

Suggestion taken. Will update iris package.

PrintlnPan commented 1 year ago

Thank you for you effort!!! ❤️