search

prometheus-community / postgres_exporter

A PostgreSQL metric exporter for Prometheus
Apache License 2.0
2.83k stars 745 forks source link

fix: upgrade golang.org/x/net v0.17.0 for http2 zero-day #937

Closed genslein closed 1 year ago

genslein commented 1 year ago

Greetings all,

We're trying to help patch the http2 zero-day exploit and would ask a patch release be made to the exporter.

https://security.snyk.io/vuln/SNYK-GOLANG-GOLANGORGXNETHTTP2-5953327

Related dependabot change https://github.com/prometheus-community/postgres_exporter/pull/936

Please feel free to make changes but prioritize the security fix.

SuperQ commented 1 year ago

Fixed by dependabot. https://github.com/prometheus-community/postgres_exporter/pull/936