operator-framework / ansible-operator-plugins

Experimental extraction/refactoring of the Operator SDK's ansible operator plugin
Apache License 2.0
9 stars 20 forks source link

CVE on golang.org/x/net/http2 v0.20.0 #64

Closed navas-op closed 2 months ago

navas-op commented 5 months ago

Security vulnerabilities on golang.org/x/net/ v0.20.0 Which have been fixed on fixed in 0.23.0.

https://github.com/operator-framework/ansible-operator-plugins/blob/main/go.mod#L89

Can this package be upgraded?

chiragkyal commented 2 months ago

Hey @navas-op, I checked that the master is now using golang.org/x/net v0.24.0 . Are we good to close this ?

acornett21 commented 2 months ago