Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

#

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Jump to bottom

Update github.com/valyala/fasthttp to version >=1.34.0 #1

Closed
zroubalik opened this issue Mar 22, 2022 · 1 comment · Fixed by #4
Closed

Update github.com/valyala/fasthttp to version >=1.34.0 #1

zroubalik opened this issue Mar 22, 2022 · 1 comment · Fixed by #4
Assignees
@daniel-yavorovich

Comments

@zroubalik
Copy link

There is a CVE on fasthttp: GHSA-fx95-883v-4q4h, github.com/valyala/fasthttp version >=1.34.0 should fix that. Please update this dependency so we can mitigate this in kedacore/keda#2775

Thanks
@zroubalik zroubalik mentioned this issue Mar 24, 2022
Closed
5 tasks
@daniel-yavorovich daniel-yavorovich self-assigned this Jul 15, 2022
@daniel-yavorovich daniel-yavorovich linked a pull request Jul 15, 2022 that will close this issue
bump github.com/valyala/fasthttp version #4
Merged
@JorTurFer
Copy link
Contributor

JorTurFer commented Jul 15, 2022 •
edited
Loading

github.com/fasthttp/router@v1.4.4 uses github.com/valyala/fasthttp@v1.31.0 as dependency, could you bump it too?
I have crated a PR with it #6

# for free to join this conversation on GitHub. Already have an account? # to comment
Assignees

@daniel-yavorovich daniel-yavorovich

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

bump github.com/valyala/fasthttp version dysnix/predictkube-libs
3 participants
@zroubalik @daniel-yavorovich @JorTurFer