Addess github.com/pkg/sftp Denial of Service (DoS) - Githubissues

opendatahub-io / modelmesh-serving

Controller for ModelMesh

Apache License 2.0

3 stars 32 forks source link

Addess github.com/pkg/sftp Denial of Service (DoS) #273

Closed davidesalerno closed 9 months ago

davidesalerno commented 9 months ago

Motivation

Fixes the CVE: https://app.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPKGSFTP-569475

Modifications

Result

PR checklist

Checklist items below are applicable for development targeted to both fast and stable branches/tags

[x] Unit tests pass locally
[x] FVT tests pass locally
[x] If the PR adds a new container image or updates the tag of an existing image (not build within cpaas), is the corresponding change made in live-builder and cpaas-midstream to add/update the image tag in the operator CSV? Link the PRs if applicable

Checklist items below are applicable for development targeted to both fast and stable branches/tags

[x] Tested modelmesh serving deployment with odh-manifests and ran odh-manifests-e2e tests locally

openshift-ci[bot] commented 9 months ago

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: davidesalerno Once this PR has been reviewed and has the lgtm label, please assign israel-hdez for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/opendatahub-io/modelmesh-serving/blob/main/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment