search

natefinch / lumberjack

lumberjack is a log rolling package for Go
MIT License
4.81k stars 593 forks source link

fix(sec): upgrade gopkg.in/yaml.v2 to 2.2.8 #172

Open Huoxi-any opened 1 year ago

Huoxi-any commented 1 year ago

What happened？

There are 1 security vulnerabilities found in gopkg.in/yaml.v2 v2.2.2

What did I do？

Upgrade gopkg.in/yaml.v2 from v2.2.2 to 2.2.8 for vulnerability fix

What did you expect to happen？

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS