influxdata / influx-stress

New tool for generating artificial load on InfluxDB
MIT License
121 stars 43 forks source link

require github.com/valyala/fasthttp@v1.34.0 #41

Closed jdstrand closed 2 years ago

jdstrand commented 2 years ago

This is to address https://github.com/advisories/GHSA-fx95-883v-4q4h. Actions performed:

$ go mod edit -require github.com/valyala/fasthttp@v1.34.0
$ go mod tidy
$ go mod vendor

Tested things still worked by building influxdb 1.x from source and running:

$ go build -o ./influx-stress ./cmd/influx-stress/main.go
$ ./influx-stress insert -r 1m -f
jdstrand commented 2 years ago

Per discussion with the edge team, inch should be used instead of this repo. I'm going to apply this PR, then add an obsolescence notice and archive the repo.