Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade golang.org/x/crypto to a version not affected by CVE-2024-45337 #1058

Open
oysteinidematorget opened this issue Dec 17, 2024 · 0 comments · Fixed by #1082
Open

Upgrade golang.org/x/crypto to a version not affected by CVE-2024-45337 #1058

oysteinidematorget opened this issue Dec 17, 2024 · 0 comments · Fixed by #1082
Labels
bug Something isn't working

Comments

@oysteinidematorget
Copy link

Describe the bug

JFrog XRay report the jfrog CLI tool as vulnerable due to golang.org/x/crypto:0.29.0

Current behavior

JFrog CLI tools reported as vulnerable in JFrog scanning tools.

Reproduction steps

No response

Expected behavior

No response

JFrog Client-Go version

v1.48.0

JFrog CLI version (if applicable)

2.71.4

Operating system type and version

Fedora 40

JFrog Artifactory version

No response

JFrog Xray version

No response
@oysteinidematorget oysteinidematorget added the bug Something isn't working label Dec 17, 2024
@EyalDelarea EyalDelarea linked a pull request Feb 5, 2025 that will close this issue
Promote version v1.50.0 #1082
Merged
4 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Promote version v1.50.0 EyalDelarea/jfrog-client-go
1 participant
@oysteinidematorget