fix(sec): upgrade golang.org/x/net to 0.7.0 - Githubissues

cayleygraph / cayley

An open-source graph database

https://cayley.io

Apache License 2.0

14.85k stars 1.25k forks source link

fix(sec): upgrade golang.org/x/net to 0.7.0 #983

Closed ChengDaqi2023 closed 1 year ago

ChengDaqi2023 commented 1 year ago

What happened？

There are 1 security vulnerabilities found in golang.org/x/net v0.0.0-20190628185345-da137c7871d7

CVE-2022-41723

What did I do？

Upgrade golang.org/x/net from v0.0.0-20190628185345-da137c7871d7 to 0.7.0 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

How can we automate the detection of these types of issues?

By using the GitHub Actions configurations provided by murphysec, we can conduct automatic code security checks in our CI pipeline.

The specification of the pull request

PR Specification from OSCS

This change is

dennwc commented 1 year ago

I just updated all the dependencies, x/net included. Thank you for bringing this up.