Skip to content

Vulnerabilities in golang/crypto < 0.35.0 and golang/net < 0.38.0 #87

@pilje

Description

@pilje

Two of the golang packages used in this action contains vulnerabilities. Would really appreciate if these could be patched soon 🙏

uses: appleboy/[email protected] 

Critical severity vulnerabilities .. 🔥

Vulnerability Package
GHSA-v778-237x-gjrc pkg:golang/golang.org/x/[email protected]

High severity vulnerabilities .. ⚠️

Vulnerability Package
GHSA-hcg3-q754-cr77 pkg:golang/golang.org/x/[email protected]

Medium severity vulnerabilities ..

Vulnerability Package
GHSA-qxp5-gwg8-xv66 pkg:golang/golang.org/x/[email protected]
GHSA-vvgc-356p-c3xw pkg:golang/golang.org/x/[email protected]

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions