New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

upgrade "golang.org/x/crypto" version to 0.31.0 #2011

Open

zyl423 opened this issue Dec 20, 2024 · 2 comments · May be fixed by #2012

zyl423 commented Dec 20, 2024 •

edited

Loading

We need upgrade "golang.org/x/crypto" version to fix the vulnerability: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Consul Template version

0.39.1

jrasell linked a pull request

that will close this issue

deps: update golang.org/x dependencies. #2012

Open

jasonsedwards commented Feb 4, 2025

I'm also chasing something similar on #2009. The absence of releases since July 2024 is disturbing.

1FastSTi commented Feb 12, 2025

Same, please, maintain this project.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment