search

sonatype-nexus-community / nancy

A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index
Apache License 2.0
549 stars 76 forks source link

[DepShield] (CVSS 7.5) Vulnerability due to usage of golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c #235

Closed sonatype-depshield[bot] closed 3 years ago

sonatype-depshield[bot] commented 3 years ago

Vulnerabilities

DepShield reports that this application's usage of golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c results in the following vulnerability(s):

Occurrences

golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c is a transitive dependency introduced by the following direct dependency(s):

• github.com/spf13:viper:1.7.1         └─ github.com/bketelsen:crypt:0.0.3-0.20200106085610-5cbc8cc4026c               └─ google.golang.org:api:0.13.0                     └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c               └─ cloud.google.com/go:firestore:1.1.0                     └─ cloud.google.com:go:0.46.3                           └─ google.golang.org:api:0.9.0                                 └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                           └─ cloud.google.com/go:pubsub:1.0.1                                 └─ google.golang.org:api:0.9.0                                       └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                 └─ cloud.google.com:go:0.45.1                                       └─ google.golang.org:api:0.9.0                                             └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                       └─ cloud.google.com/go:datastore:1.0.0                                             └─ google.golang.org:api:0.7.0                                                   └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                             └─ cloud.google.com:go:0.44.1                                                   └─ google.golang.org:api:0.8.0                                                         └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                       └─ cloud.google.com/go:bigquery:1.0.1                                             └─ google.golang.org:api:0.8.0                                                   └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                             └─ cloud.google.com:go:0.44.2                                                   └─ google.golang.org:api:0.8.0                                                         └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                                   └─ cloud.google.com/go:datastore:1.0.0                                                         └─ google.golang.org:api:0.7.0                                                               └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                                         └─ cloud.google.com:go:0.44.1                                                               └─ google.golang.org:api:0.8.0                                                                     └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                           └─ cloud.google.com/go:datastore:1.0.0                                 └─ google.golang.org:api:0.7.0                                       └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                 └─ cloud.google.com:go:0.44.1                                       └─ google.golang.org:api:0.8.0                                             └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                           └─ cloud.google.com/go:bigquery:1.0.1                                 └─ google.golang.org:api:0.8.0                                       └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                 └─ cloud.google.com:go:0.44.2                                       └─ google.golang.org:api:0.8.0                                             └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                       └─ cloud.google.com/go:datastore:1.0.0                                             └─ google.golang.org:api:0.7.0                                                   └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                             └─ cloud.google.com:go:0.44.1                                                   └─ google.golang.org:api:0.8.0                                                         └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                     └─ cloud.google.com/go:storage:1.0.0                           └─ google.golang.org:api:0.9.0                                 └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                           └─ cloud.google.com:go:0.46.3                                 └─ google.golang.org:api:0.9.0                                       └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                 └─ cloud.google.com/go:pubsub:1.0.1                                       └─ google.golang.org:api:0.9.0                                             └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                       └─ cloud.google.com:go:0.45.1                                             └─ google.golang.org:api:0.9.0                                                   └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                             └─ cloud.google.com/go:datastore:1.0.0                                                   └─ google.golang.org:api:0.7.0                                                         └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                                   └─ cloud.google.com:go:0.44.1                                                         └─ google.golang.org:api:0.8.0                                                               └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                             └─ cloud.google.com/go:bigquery:1.0.1                                                   └─ google.golang.org:api:0.8.0                                                         └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                                   └─ cloud.google.com:go:0.44.2                                                         └─ google.golang.org:api:0.8.0                                                               └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                                         └─ cloud.google.com/go:datastore:1.0.0                                                               └─ google.golang.org:api:0.7.0                                                                     └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                                               └─ cloud.google.com:go:0.44.1                                                                     └─ google.golang.org:api:0.8.0                                                                           └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                 └─ cloud.google.com/go:datastore:1.0.0                                       └─ google.golang.org:api:0.7.0                                             └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                       └─ cloud.google.com:go:0.44.1                                             └─ google.golang.org:api:0.8.0                                                   └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                 └─ cloud.google.com/go:bigquery:1.0.1                                       └─ google.golang.org:api:0.8.0                                             └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                       └─ cloud.google.com:go:0.44.2                                             └─ google.golang.org:api:0.8.0                                                   └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                             └─ cloud.google.com/go:datastore:1.0.0                                                   └─ google.golang.org:api:0.7.0                                                         └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                                                   └─ cloud.google.com:go:0.44.1                                                         └─ google.golang.org:api:0.8.0                                                               └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c                     └─ google.golang.org:api:0.13.0                           └─ golang.org/x:net:0.0.0-20190503192946-f4e77d36d62c

This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.