search

hyperledger / fabric-chaincode-go

Hyperledger Fabric Packages for Go Chaincode
https://pkg.go.dev/github.com/hyperledger/fabric-chaincode-go
Apache License 2.0
137 stars 133 forks source link

Vulnerability reported in gotext #51

Closed bviswana101 closed 2 years ago

bviswana101 commented 2 years ago

CVE-2021-38561 (High) detected in github.com/golang/text-v0.3.0, github.com/golang/text-v0.3.2

github.com/hyperledger/fabric-protos-go-bf864f01d75e53539d738b06d590c08d6b6fb5d5 (Root Library)
    github.com/grpc/grpc-go-v1.23.0
       github.com/golang/net-60506f45cf65977eb3a9c6e30f995f54a721c271
          x github.com/golang/text-v0.3.0 (Vulnerable Library)

our go.mod

module bc-document-store

go 1.16

require (
    github.com/hyperledger/fabric-chaincode-go v0.0.0-20220131132609-1476cf1d3206
    github.com/hyperledger/fabric-protos-go v0.0.0-20220613214546-bf864f01d75e
    github.com/sirupsen/logrus v1.8.1
)
jt-nti commented 2 years ago

This should be fixed in #56