Update/Fix dependencies with active vulnerabilities

iegomez / mosquitto-go-auth

Auth plugin for mosquitto.

MIT License

495 stars 165 forks source link

Update/Fix dependencies with active vulnerabilities #313

Closed guyse-michael closed 5 months ago

guyse-michael commented 5 months ago

I've started to use this and love how easy it is to integrate with a backend. However the fact that there are 6 high/medium active vulnerabilities within the project worries me. I can see that there is a bot actively creating PRs to get these dependencies updated for a few months now, however it would be great if we could get them officially updated in a release.

iegomez commented 5 months ago

Hey, @guyse-michael. You're right, the problem is I need to fix the automated tests first and I haven't got the time to do so. I'll try to fix them soon and then I'll merge all those PRs.