slimtoolkit / slim

Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Apache License 2.0
19.21k stars 716 forks source link

fix(sec): upgrade github.com/antchfx/xmlquery to 1.3.1 #433

Closed pen4 closed 1 year ago

pen4 commented 1 year ago

What happened?

There are 1 security vulnerabilities found in github.com/antchfx/xmlquery v1.0.0

What did I do?

Upgrade github.com/antchfx/xmlquery from v1.0.0 to 1.3.1 for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS Signed-off-by:pen4948453219@qq.com

ghost commented 1 year ago
👇 Click on the image for a new way to code review - Make big changes easier — review code in small groups of related files - Know where to start — see the whole change at a glance - Take a code tour — explore the change with an interactive tour - Make comments and review — all fully sync’ed with github [Try it now!](https://app.codesee.io/r/reviews?pr=433&src=https%3A%2F%2Fgithub.com%2Fdocker-slim%2Fdocker-slim)

Review these changes using an interactive CodeSee Map

Legend

CodeSee Map Legend

kcq commented 1 year ago

colly update took care of it