search

alexandear / import-gitlab-commits

Import commits from a private GitLab repository in an anonymized way.
MIT License
161 stars 14 forks source link

Fix vulnerabilities: GO-2023-2102, GO-2023-1988 #45

Closed alexandear closed 9 months ago

alexandear commented 9 months ago

The PR fixes the following govulncheck issues:

There are 2 vulnerabilities in modules that you require that are
neither imported nor called. You may not need to take any action.
See https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck for details.

Vulnerability #1: GO-2023-2102
    HTTP/2 rapid reset can cause excessive work in net/http
  More info: https://pkg.go.dev/vuln/GO-2023-2102
  Module: golang.org/x/net
    Found in: golang.org/x/net@v0.10.0
    Fixed in: golang.org/x/net@v0.17.0

Vulnerability #2: GO-2023-1988
    Improper rendering of text nodes in golang.org/x/net/html
  More info: https://pkg.go.dev/vuln/GO-2023-1988
  Module: golang.org/x/net
    Found in: golang.org/x/net@v0.10.0
    Fixed in: golang.org/x/net@v0.13.0

Your code is affected by 2 vulnerabilities from 1 module.