aws / aws-xray-sdk-go

AWS X-Ray SDK for the Go programming language.
Apache License 2.0
276 stars 117 forks source link

Fix vulnerability of google.golang.org/grpc@v1.35.0 module #413

Closed rudra012 closed 1 year ago

rudra012 commented 1 year ago

There is one vulnerable package being imported in google.golang.org/grpc@v1.35.0. The vulnerable package is golang.org/x/net@v0.0.0-20190311183353-d8887717615a

Link to go.mod of grpc: https://github.com/grpc/grpc-go/blob/v1.35.0/go.mod

image

Vulnerability detected using Gitlab ultimate DAST detection:

Fix:

wangzlei commented 1 year ago

https://github.com/aws/aws-xray-sdk-go/pull/415