fix(sec): upgrade golang.org/x/net to 0.7.0 - Githubissues

go-kit / kit

A standard library for microservices.

https://gokit.io

MIT License

26.53k stars 2.43k forks source link

fix(sec): upgrade golang.org/x/net to 0.7.0 #1257

Open chncaption opened 1 year ago

chncaption commented 1 year ago

What happened？

There are 1 security vulnerabilities found in golang.org/x/net v0.0.0-20211216030914-fe4d6282115f

CVE-2022-41723

What did I do？

Upgrade golang.org/x/net from v0.0.0-20211216030914-fe4d6282115f to 0.7.0 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS