search

containers / ocicrypt

Encryption libraries for Encrypted OCI Container images
Apache License 2.0
141 stars 33 forks source link

Update github.com/go-jose/go-jose/v3 #100

Closed mtrmac closed 10 months ago

mtrmac commented 10 months ago

https://github.com/go-jose/go-jose/releases/tag/v3.0.1 reports a DoS in code that is called by ocicrypt.

Typically I wouldn’t expect users to want to DoS themselves, but updating would at least silence neurotic vulnerability scanners.

(c/image will update either way, in https://github.com/containers/image/pull/2188 .)

stefanberger commented 10 months ago

Thanks.