CVE's in stdlib

[shadybraden]

Hello! First of all, I absolutely love Grimmory!.

I CVE scanned Grimmory, and the latest version and it showed multiple CVE's in stdlib. I then looked through the code looking for this, and I clearly do not understand C and programming enough to understand this all.

But per me simply running grype grimmory/grimmory:v3.2.0 and trivy image grimmory/grimmory@sha256:a228db61f0898ab7268664093b2a17b08d80387ed7f1c39c1c7bc30fd7360022 and similar, I see a known exploited vulnerability with an fix available.

I'm not trying to cause extra work, just bring awareness to this. I appreciate the effort that is put into this project.

[imnotjames]

There's a security reporting feature in GitHub.

[shadybraden]

There's a security reporting feature in GitHub.

Oop didn't realize. Moving there