search

openshift / openshift-velero-plugin

General Velero plugin for backup and restore of openshift workloads.
Apache License 2.0
47 stars 37 forks source link

OADP-2990 Fix CVE-2023-45142 otelhttp #219

Closed weshayutin closed 8 months ago

weshayutin commented 8 months ago

https://github.com/open-telemetry/opentelemetry-go-contrib/security/advisories/GHSA-rcjv-mgp8-qvmr

openshift-ci[bot] commented 8 months ago

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: weshayutin

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
kaovilai commented 8 months ago

Closing, otelhttp is not a dependency in master branch to begin with.

kaovilai commented 8 months ago

For those who like to read more, see https://github.com/dependabot/dependabot-core/issues/4740#issuecomment-1458532057