Multiple High / Critical vulnerabilities in Go stdlib

[bpfoster]

What steps will reproduce the bug?

Scans of the most recent wait-for-port release are showing multiple vulnerabilities in the version of go that was used to build the binary.

• Critical: https://nvd.nist.gov/vuln/detail/CVE-2024-24790
  • https://pkg.go.dev/vuln/GO-2024-2887
• High: https://nvd.nist.gov/vuln/detail/CVE-2023-39325
  • https://pkg.go.dev/vuln/GO-2023-2102
• High: https://nvd.nist.gov/vuln/detail/CVE-2023-45288
  • https://pkg.go.dev/vuln/GO-2024-2687

All can be resolved by updating to the latest go 1.21 version (1.21.11)

What is the expected behavior?

No high impact vulnerabilities reported in scanning of artifacts.

What do you see instead?

Above mentioned vulnerabilities

Additional information

No response

[bpfoster]

Closing this issue as these are all resolved in the v1.0.8 release from today which upgraded to go 1.22.4.