CVE-2022-28948: upgrade to gopkg.in/yaml.v3

hahwul / dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

https://dalfox.hahwul.com

MIT License

3.59k stars 402 forks source link

CVE-2022-28948: upgrade to gopkg.in/yaml.v3 #377

Closed hahwul closed 1 year ago

hahwul commented 2 years ago

https://github.com/hahwul/dalfox/security/dependabot/1
https://github.com/advisories/GHSA-hp87-p4gw-j4gq

go mod why gopkg.in/yaml.v2

# gopkg.in/yaml.v2
github.com/hahwul/dalfox/v2/pkg/server/docs
github.com/swaggo/swag
github.com/go-openapi/spec
github.com/go-openapi/swag
gopkg.in/yaml.v2