Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix CVE-2023-3978 #449

Merged
merged 1 commit into from
Aug 22, 2023
Merged

Fix CVE-2023-3978 #449

merged 1 commit into from
Aug 22, 2023

Conversation

LionelJouin
Copy link
Member

Description

CVE-2023-3978 is probably not included in the compiled binaries but will be detected by tools like Nancy.
Remove deprecated github.com/golang/protobuf/ptypes/empty

Issue link

https://nvd.nist.gov/vuln/detail/CVE-2023-3978
https://jenkins.nordix.org/job/meridio-periodic-security-scan/331/artifact/_output/report.txt

Checklist

  • Purpose
    • Bug fix
    • New functionality
    • Documentation
    • Refactoring
    • CI
  • Test
    • Unit test
    • E2E Test
    • Tested manually
  • Introduce a breaking change
    • Yes (description required)
    • No

@LionelJouin
Copy link
Member Author

/reverify

1 similar comment
@LionelJouin
Copy link
Member Author

/reverify

Remove deprecated github.com/golang/protobuf/ptypes/empty
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

1 participant