From e523d52ae9ff1468f500ff1cab7788e2da1e406a Mon Sep 17 00:00:00 2001 From: lgtm <1gtm@users.noreply.github.com> Date: Mon, 25 Oct 2021 07:37:48 -0700 Subject: [PATCH] Fix satori/go.uuid security vulnerability (#19) Signed-off-by: 1gtm <1gtm@appscode.com> --- go.mod | 2 +- vendor/modules.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/go.mod b/go.mod index e6325d47..617571b4 100644 --- a/go.mod +++ b/go.mod @@ -36,7 +36,7 @@ require ( sigs.k8s.io/yaml v1.2.0 // indirect ) -replace github.com/satori/go.uuid => github.com/gofrs/uuid v4.0.0+incompatible +replace github.com/satori/go.uuid => github.com/gomodules/uuid v4.0.0+incompatible replace github.com/dgrijalva/jwt-go => github.com/gomodules/jwt v3.2.2+incompatible diff --git a/vendor/modules.txt b/vendor/modules.txt index 7c49ee49..4d656a42 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -122,7 +122,7 @@ sigs.k8s.io/structured-merge-diff/v4/value # sigs.k8s.io/yaml v1.2.0 ## explicit; go 1.12 sigs.k8s.io/yaml -# github.com/satori/go.uuid => github.com/gofrs/uuid v4.0.0+incompatible +# github.com/satori/go.uuid => github.com/gomodules/uuid v4.0.0+incompatible # github.com/dgrijalva/jwt-go => github.com/gomodules/jwt v3.2.2+incompatible # github.com/golang-jwt/jwt => github.com/golang-jwt/jwt v3.2.2+incompatible # github.com/form3tech-oss/jwt-go => github.com/form3tech-oss/jwt-go v3.2.5+incompatible