go-kit / kit

A standard library for microservices.
https://gokit.io
MIT License
26.35k stars 2.42k forks source link

New security vulnerabilities found in multiple direct and indirect third-party dependencies #1280

Open sagarsaini1 opened 7 months ago

sagarsaini1 commented 7 months ago

What did you do?

A security check was run on the service which is using go-kit/kit as a third-party dependency.

What did you expect?

No security vulnerabilities were to be found during the scan. No vulnerable libraries should be used.

What happened instead?

Security vulnerabilities were detected on the following libraries used inside of kit:

direct dependencies:

indirect dependencies:

link between above mentioned libraries and go-kit/kit was established using the go mod graph command.