Skip to content

Conversation

@b4bay
Copy link
Contributor

@b4bay b4bay commented Dec 26, 2022

Bump github.com/stretchr/testify to v1.7.0 to update gopkg.in/yaml.v2 version contains XML Entity Expansion vulnerability

Signed-off-by: Alex Goncharov [email protected]

docker/cli#2117
https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/blob/master/go/gopkg.in/yaml.v2/GMS-2019-2.yml

… version contains XML Entity Expansion vulnerability

Signed-off-by: Alex Goncharov <[email protected]>
@b4bay
Copy link
Contributor Author

b4bay commented Dec 26, 2022

@jackc @edorfaus please consider merging if you are ok with that.

@jackc jackc merged commit 091c0ba into jackc:master Dec 27, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants