Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump go libraries versions to mitigate CVE-2024-24786 #30

Merged
merged 2 commits into from
Mar 20, 2024

Conversation

alelevinas
Copy link
Contributor

@alelevinas alelevinas commented Mar 20, 2024

Tested locally with a prometheus instance running in minikube
Screenshot 2024-03-20 at 14 41 41

No vulnerabilities found in the new image
Screenshot 2024-03-20 at 14 44 47

RichardoC
RichardoC previously approved these changes Mar 20, 2024
Copy link
Contributor

@RichardoC RichardoC left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for fixing these up!

@RichardoC RichardoC merged commit 260d75f into thought-machine:master Mar 20, 2024
2 checks passed
@alelevinas alelevinas deleted the vuln/CVE-2024-24786 branch March 20, 2024 15:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants