You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We've been COPYing berglas into our containers with no issues until just now - our container scanning service which searches for CVE's has found the following problem:
HIGH severity vulnerability CVE-2024-45338 found affecting golang.org/x/net 0.29.0 and fixed in 0.33.0
We've been COPYing berglas into our containers with no issues until just now - our container scanning service which searches for CVE's has found the following problem:
Googling this CVE: https://advisories.gitlab.com/pkg/golang/golang.org/x/net/CVE-2024-45338/ details the vulnerability.
Is it possible for you to bump your dependency to
golang.org/x/net v0.33.0
and create a new release?The text was updated successfully, but these errors were encountered: