hyperledger / fabric-sdk-go

https://wiki.hyperledger.org/display/fabric
Apache License 2.0
910 stars 510 forks source link

fix(deps): uncontrolled Resource Consumption in promhttp CVE-2022-21698 #284

Open petermetz opened 7 months ago

petermetz commented 7 months ago

The prometheus client needs to be upgraded because the currently used version is vulnerable. Please see issue title and also this other issue for further details: https://github.com/hyperledger/cacti/issues/2918