search

containers / ocicrypt

Encryption libraries for Encrypted OCI Container images
Apache License 2.0
149 stars 33 forks source link

Update github.com/go-jose/go-jose/v3 #100

Closed mtrmac closed 1 year ago

mtrmac commented 1 year ago

https://github.com/go-jose/go-jose/releases/tag/v3.0.1 reports a DoS in code that is called by ocicrypt.

Typically I wouldn’t expect users to want to DoS themselves, but updating would at least silence neurotic vulnerability scanners.

(c/image will update either way, in https://github.com/containers/image/pull/2188 .)

stefanberger commented 1 year ago

Thanks.