search

grpc-ecosystem / grpc-health-probe

A command-line tool to perform health-checks for gRPC applications in Kubernetes and elsewhere
Apache License 2.0
1.42k stars 186 forks source link

Jfrog Xray reports security flaws on grpc_health_probe-linux-amd64 v 0.3.6 #64

Closed ghevge closed 3 years ago

ghevge commented 3 years ago

One of my organization security scanning tools (Jfrog Xray) is reporting a bunch of security flaws on the grpc_health_problem component which I'm using for my grpc service.

Some issues are coming from the go version used: 1.15.6. Apparently there are some flaws in this version and it is requesting to use at least version 1.15.9 or 1.16.1

There is also a flaw reported in golang.org/x/text:0.3.4. Version 0.3.5 should be used to fix the problem.

Any chance to have these flaws fixed any time soon ?

Thanks.

ghevge commented 3 years ago

image image image