-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[TT-14169] Review and address CVEs #6915
Conversation
API Changes no api changes detected |
PR Reviewer Guide 🔍Here are some key observations to aid the review process:
|
PR Code Suggestions ✨No code suggestions found for the PR. |
User description
PR for https://tyktech.atlassian.net/browse/TT-14169
Addressed CVEs:
Rest of the CVEs were related to GNU C Library and OpenSSL. List of the CVEs can be found here:
https://tyktechnologies.github.io/list-docker-cves/gateway/v5.8.0-rc1/
PR Type
Description
Upgrade dependencies to mitigate CVEs
Update versions in go.mod and checksums in go.sum
Changes walkthrough 📝
go.mod
Update dependency versions in go.mod
go.mod
x/sys, x/text, x/term versions
go.sum
Refresh dependency checksums in go.sum
go.sum
github.com/go-jose/go-jose/v4