vektra / mockery

A mock code autogenerator for Go
https://vektra.github.io/mockery/
BSD 3-Clause "New" or "Revised" License
5.8k stars 395 forks source link

updated text version #745

Closed prashantpatil1390 closed 5 months ago

prashantpatil1390 commented 5 months ago

text current version is vulnerable to An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse. Refer the CVE number = CVE-2022-32149

Description

Please include a summary of the changes and the related issue. Please also include relevant motivation and context.

Type of change

Version of Golang used when building/testing:

How Has This Been Tested?

Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration

Checklist

LandonTClipp commented 5 months ago

Hi, can you base this off of the master branch? v3 is not under active development (yet).

prashantpatil1390 commented 5 months ago

Let me check, and get back to you. Actually I want to change 2 versions of sub packages-

  1. net:latest
  2. text:latest

Thanks & Regards,

On Tue, Jan 9, 2024 at 11:00 PM Landon Clipp @.***> wrote:

Hi, can you base this off of the master branch? v3 is not under active development (yet).

— Reply to this email directly, view it on GitHub https://github.com/vektra/mockery/pull/745#issuecomment-1883489507, or unsubscribe https://github.com/notifications/unsubscribe-auth/AMZB3ULM77H3HHAHGP4MP7LYNV5D5AVCNFSM6AAAAABBR554SCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQOBTGQ4DSNJQG4 . You are receiving this because you authored the thread.Message ID: @.***>