fix(sec): upgrade gopkg.in/yaml.v3 to 3.0.0

go-playground / validator

:100:Go Struct and Field validation, including Cross Field, Cross Struct, Map, Slice and Array diving

MIT License

16.79k stars 1.32k forks source link

fix(sec): upgrade gopkg.in/yaml.v3 to 3.0.0 #1057

Closed wjl110 closed 1 year ago

wjl110 commented 1 year ago

What happened？

There are 1 security vulnerabilities found in gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b

CVE-2022-28948

What did I do？

Upgrade gopkg.in/yaml.v3 from v3.0.0-20210107192922-496545a6307b to 3.0.0 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS

coveralls commented 1 year ago

Coverage: 74.182% (+0.0%) from 74.182% when pulling e9d93b4439ce9b04375684c73666b0c7995a9fb7 on wjl110:oscs_fix_cf81mc8au51vh2d7rhj0 into c7e0172e0fd176bdc521afb5186818a7db6b77ac on go-playground:master.