danielqsj / kafka_exporter

Kafka exporter for Prometheus
Apache License 2.0
2.1k stars 602 forks source link

Update client_golang to 1.11.1 or higher to eliminate CVE-2022-21698 #310

Closed Boojapho closed 1 year ago

Boojapho commented 2 years ago

Current release uses client_golang 1.11.0. Update it to 1.11.1 (or higher) to eliminate the vulnerability found here: https://nvd.nist.gov/vuln/detail/CVE-2022-21698.

Suggest moving to latest version of library.