vmware-tanzu / astrolabe

Data protection framework for complex applications
Other
38 stars 21 forks source link

Fix linkage with old mongo DB driver #119

Closed dsu-igeek closed 2 years ago

dsu-igeek commented 2 years ago

CVE-2021-20329 is an issue in the MongoDB driver earlier that 1.5.1. Astrolabe is indirectly linking with this thru the OpenAPI code (go-openapi/strfmt). Update to latest go-openapi/strfmt to resolve this.