fix(sec): upgrade gopkg.in/yaml.v3 to 3.0.0

fabiolb / fabio

Consul Load-Balancing made simple

https://fabiolb.net

MIT License

7.25k stars 620 forks source link

fix(sec): upgrade gopkg.in/yaml.v3 to 3.0.0 #921

Open Hannibal0x opened 1 year ago

Hannibal0x commented 1 year ago

What happened？

There are 1 security vulnerabilities found in gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b

CVE-2022-28948

What did I do？

Upgrade gopkg.in/yaml.v3 from v3.0.0-20210107192922-496545a6307b to 3.0.0 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS

CLAassistant commented 1 year ago

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}