Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

adding app template values #208

Merged
merged 1 commit into from
Sep 1, 2023

adding app template values

65aa51c
Select commit
Loading
Failed to load commit list.
Merged

adding app template values #208

adding app template values
65aa51c
Select commit
Loading
Failed to load commit list.
Mend Bolt for GitHub / Mend Security Check failed Sep 1, 2023 in 5m 27s

Security Report

The Security Check found 4 vulnerabilities.

CVE Severity CVSS Score Vulnerable Library Suggested Fix Issue
CVE-2022-41721

Dependency Hierarchy:

-> go.temporal.io/sdk-v1.17.0 (Root Library)

   -> github.com/grpc-ecosystem/go-grpc-middleware-v1.3.0

     -> ❌ golang.org/x/net-v0.0.0-20220906165146-f3363e06e74c (Vulnerable Library)

High 7.5 golang.org/x/net-v0.0.0-20220906165146-f3363e06e74c Upgrade to version: v0.2.0 #12
CVE-2022-32149

Dependency Hierarchy:

-> go.temporal.io/sdk-v1.17.0 (Root Library)

   -> google.golang.org/grpc-v1.49.0

     -> golang.org/x/net-v0.0.0-20220906165146-f3363e06e74c

       -> ❌ golang.org/x/text-v0.3.7 (Vulnerable Library)

High 7.5 golang.org/x/text-v0.3.7 Upgrade to version: v0.3.8 #12
CVE-2023-26125

Dependency Hierarchy:

-> ❌ github.com/gin-GONIC/gin-v1.8.1 (Vulnerable Library)

High 7.3 github.com/gin-GONIC/gin-v1.8.1 Upgrade to version: v1.9.0 #99
CVE-2023-29401

Dependency Hierarchy:

-> ❌ github.com/gin-GONIC/gin-v1.8.1 (Vulnerable Library)

Medium 4.3 github.com/gin-GONIC/gin-v1.8.1 #99

Total libraries scanned: 292
Scan token: f6d0a192f4384e61a40c6ed909738301
View more details on Mend Bolt for GitHub