search

containernetworking / plugins

Some reference and example networking plugins, maintained by the CNI team.
Apache License 2.0
2.14k stars 775 forks source link

go1.20.4 stdlib CVEs #975

Open xtremerui opened 9 months ago

xtremerui commented 9 months ago

Hi there, from our CVE scans we see there are bunch of Golang 1.20.4 std lib CVEs reported for binary vrf, for example some critical ones:

https://nvd.nist.gov/vuln/detail/CVE-2023-29405 https://nvd.nist.gov/vuln/detail/CVE-2023-29404 https://nvd.nist.gov/vuln/detail/CVE-2023-29402 https://nvd.nist.gov/vuln/detail/CVE-2023-39323

Wondering are those applicable? If yes, should we expect release with Golang bump? Thank you!