Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update go-jose to avoid CVEs #2353

Closed
andrewpmartinez opened this issue Aug 26, 2024 · 1 comment
Closed

Update go-jose to avoid CVEs #2353

andrewpmartinez opened this issue Aug 26, 2024 · 1 comment
Assignees
@andrewpmartinez
Labels
bug Something isn't working chore controller Issue related to the controller

Comments

@andrewpmartinez
Copy link
Member

andrewpmartinez commented Aug 26, 2024 •
edited
Loading

github.com/zitadel/oidc v2 uses an out of date go-jose repository path. The new go-jose repository has CVE fixes. The downstream repository needs to be updated.
@andrewpmartinez andrewpmartinez self-assigned this Aug 26, 2024
@andrewpmartinez andrewpmartinez added bug Something isn't working chore controller Issue related to the controller labels Aug 26, 2024
@andrewpmartinez
Copy link
Member Author

See zitadel/oidc#630

For the oidc PR. Awaiting a response from the zitadel team.

@openziti openziti deleted a comment Aug 26, 2024
andrewpmartinez added a commit that referenced this issue Sep 3, 2024
@andrewpmartinez
Merge pull request #2372 from openziti/fix.2353.update.zitadel.oidc
a7ba83b 
fix #2353 update oidc dep which fixes down stream go-jose dep
andrewpmartinez added a commit to openziti/sdk-golang that referenced this issue Sep 3, 2024
@andrewpmartinez
fix openziti/ziti#2353 upate zital/oidc dep to avoid CVEs in go-jose
b666719
andrewpmartinez added a commit to openziti/sdk-golang that referenced this issue Sep 3, 2024
@andrewpmartinez
Merge pull request #617 from openziti/fix.2353.update.zitadel.oidc
45d261f 
fix openziti/ziti#2353 upate zital/oidc dep to avoid CVEs in go-jose
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@andrewpmartinez andrewpmartinez

Labels
bug Something isn't working chore controller Issue related to the controller
Projects
Security/IdP Features & Capabilities
Status: Done
Milestone
No milestone
Development

No branches or pull requests
1 participant
@andrewpmartinez