opendatahub-io / modelmesh-serving

Controller for ModelMesh
Apache License 2.0
3 stars 31 forks source link

Fix Stack-based Buffer Overflow on protobuf #274

Closed davidesalerno closed 7 months ago

davidesalerno commented 7 months ago

Motivation

Fixes CVE https://security.snyk.io/vuln/SNYK-GOLANG-GOOGLEGOLANGORGPROTOBUFENCODINGPROTOJSON-6137908

Modifications

Only g.mod and go.sum with fixed protobuf module

Result

Avoid Buffer Overflow on protobuf module

PR checklist

Checklist items below are applicable for development targeted to both fast and stable branches/tags

Checklist items below are applicable for development targeted to both fast and stable branches/tags

openshift-ci[bot] commented 7 months ago

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: davidesalerno Once this PR has been reviewed and has the lgtm label, please assign anishasthana for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/opendatahub-io/modelmesh-serving/blob/main/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment