sonatype-nexus-community / nancy

A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
Apache License 2.0
549 stars 76 forks source link

fix: SONATYPE-2019-0890 in github.com/pkg/sftp v1.10.1 #233

Closed bhamail closed 3 years ago

bhamail commented 3 years ago

resolve SONATYPE-2019-0890 in github.com/pkg/sftp v1.10.1 via replace directive

cc @bhamail / @DarthHater