Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(dep): CVE-2020-15114 #1406

Closed
wants to merge 1 commit into from
Closed

fix(dep): CVE-2020-15114 #1406

wants to merge 1 commit into from

Conversation

hashier
Copy link

@hashier hashier commented May 28, 2021 •
edited
Loading

Upgrade crypt with a patched CVE-2020-15114

https://nvd.nist.gov/vuln/detail/CVE-2020-15114 (7.7 Score HIGH)

go get github.com/bketelsen/crypt@f295231a095e2d111d0e1da0e553215a01aa0848
go mod tidy

See: spf13/viper#1145
Reference: bketelsen/crypt#11

PS: Fixes https://nvd.nist.gov/vuln/detail/CVE-2020-15115 as well (7.5 Score HIGH)

@hashier
fix(dep): CVE-2020-15114
44ad79d 
Upgrade crypt with a patched CVE-2020-15114
@CLAassistant
Copy link

CLAassistant commented May 28, 2021 •
edited
Loading

CLA assistant check
All committers have signed the CLA.

@hashier hashier mentioned this pull request May 28, 2021
Closed
@sagikazarmark sagikazarmark mentioned this pull request Jun 16, 2021
Merged
@umarcor umarcor mentioned this pull request Jun 29, 2021
Merged
@spf13 spf13 closed this in #1420 Jun 30, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@hashier @CLAassistant