CVE hits on latest release

mmurtha commented 4 months ago

Hello I would love to continue using this project but our cyber scans are preventing me. Can you look at these scan results and consider updating your go version? Thank you

./infoblox/2.5.0/linux_amd64/terraform-prov NAME INSTALLED stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 stdlib go1.17.6 ider-infoblox_v2.5.0 FIXED-IN TYPE VULNERABILITY SEVERITY go-module CVE-2023-24540 Critical
go-module CVE-2023-24538 Critical
go-module CVE-2022-23806 Critical
go-module CVE-2023-45287 High
go-module CVE-2023-45285 High
go-module CVE-2023-44487 High
go-module CVE-2023-29403 High
go-module CVE-2023-29400 High
go-module CVE-2023-24539 High
go-module CVE-2023-24537 High
go-module CVE-2023-24536 High
go-module CVE-2023-24534 High
go-module CVE-2022-41725 High
go-module CVE-2022-41724 High
go-module CVE-2022-41723 High
go-module CVE-2022-41722 High
go-module CVE-2022-41715 High
go-module CVE-2022-32189 High
go-module CVE-2022-30635 High
go-module CVE-2022-30633 High
go-module CVE-2022-30632 High
go-module CVE-2022-30631 High
go-module CVE-2022-30630 High
go-module CVE-2022-30580 High
go-module CVE-2022-2880 High
go-module CVE-2022-2879 High
go-module CVE-2022-28327 High
go-module CVE-2022-28131 High
go-module CVE-2022-27664 High
go-module CVE-2022-24921 High
go-module CVE-2022-24675 High
go-module CVE-2022-23773 High
go-module CVE-2022-23772 High
go-module CVE-2023-39326 Medium
go-module CVE-2023-39319 Medium
go-module CVE-2023-39318 Medium
go-module CVE-2023-29409 Medium
go-module CVE-2023-29406 Medium
go-module CVE-2023-24532 Medium
go-module CVE-2022-41717 Medium
go-module CVE-2022-32148 Medium
go-module CVE-2022-29526 Medium
go-module CVE-2022-1962 Medium
go-module CVE-2022-1705 Medium
go-module CVE-2022-30629 Low

SanjeevManurkar commented 4 months ago

We will check this

JkhatriInfobox commented 2 weeks ago

In our most recent release, v2.7.0, we have included the update to Go Lang version 1.21 along with the necessary libraries.

Should the issue continue, please do not hesitate to reopen it.

infobloxopen / terraform-provider-infoblox

CVE hits on latest release #328