You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Please update the golang.org/x/crypto package to version 0.22.0 and raise the minimum Go version to 1.18.
These changes are needed to address several high and moderate severity security vulnerabilities, specifically CVE-2021-43565, CVE-2022-27191, CVE-2023-48795, and CVE-2022-29526, which were present in the previously used version of the crypto package.
Updating ensures that the DiscordGo library remains secure and up-to-date with the latest security patches and features.
The Go version in CI workflows needs updating to support versions from 1.18 through 1.22, maintaining compatibility with current Go releases.
A minimum version of Go >= 1.18.2 is required to fully address all vulnerabilities listed.
Please update the golang.org/x/crypto package to version 0.22.0 and raise the minimum Go version to 1.18.
These changes are needed to address several high and moderate severity security vulnerabilities, specifically CVE-2021-43565, CVE-2022-27191, CVE-2023-48795, and CVE-2022-29526, which were present in the previously used version of the crypto package.
Updating ensures that the DiscordGo library remains secure and up-to-date with the latest security patches and features.
The Go version in CI workflows needs updating to support versions from 1.18 through 1.22, maintaining compatibility with current Go releases.
A minimum version of Go >= 1.18.2 is required to fully address all vulnerabilities listed.
Vulnerabilities covered:
HIGH
HIGH
Moderate
Moderate
Validation Steps Proposed:
go mod tidy
diff <(gofmt -d .) <(echo -n)
go vet -x ./...
golint -set_exit_status ./...
go test -v -race ./...
Originally Proposed PR: #1528
The text was updated successfully, but these errors were encountered: