From c8a6161320c52f2d4f2c3cdb7a8c39597094ab30 Mon Sep 17 00:00:00 2001 From: aishwaryasabane Date: Sat, 9 Dec 2023 15:04:14 -0800 Subject: [PATCH] Update go.mod Found the following vulnerabilities when I looked at the packages in the mod file: 1) golang.org/x/net/http2 https://pkg.go.dev/vuln/GO-2023-2102 2) google.golang.org/grpc https://pkg.go.dev/vuln/GO-2023-2153 Raised a PR to upgrade the versions to fix these vulnerabilities. --- go.mod | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/go.mod b/go.mod index c533c74..790bef3 100644 --- a/go.mod +++ b/go.mod @@ -13,7 +13,7 @@ require ( github.com/flier/gohs v1.2.2 github.com/olekukonko/tablewriter v0.0.5 github.com/sirupsen/logrus v1.9.3 - google.golang.org/grpc v1.58.2 + google.golang.org/grpc v1.58.3 gopkg.in/yaml.v3 v3.0.1 ) @@ -61,7 +61,7 @@ require ( go.opentelemetry.io/otel/metric v1.16.0 // indirect go.opentelemetry.io/otel/trace v1.16.0 // indirect golang.org/x/mod v0.12.0 // indirect - golang.org/x/net v0.15.0 // indirect + golang.org/x/net v0.17.0 // indirect golang.org/x/sync v0.3.0 // indirect golang.org/x/sys v0.12.0 // indirect golang.org/x/text v0.13.0 // indirect