bitnami / bitnami/sealed-secrets
Is this project affected by go-restful vulnerability PRISMA-2022-0227?
- Dominant language
- Go
- Stars
- 9.3k
- Forks
- 777
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 30
Description
Hello,
Sealed Secrets currently uses package `github.com/emicklei/go-restful/v3` version `v3.9.0`. In the ticket https://github.com/emicklei/go-restful/issues/521, there is a vulnerability for PRISMA-2022-0227, reported by Twistlock. Do you know if this project if affected by this vulnerability, and is it possible to bump this to v3.10.1+?
Thank you!
Contributor guide
Research direction
Start by checking the dependency metadata for github.com/emicklei/go-restful/v3 and compare v3.9.0 with the PRISMA-2022-0227 report and v3.10.1+. Review the project's existing Go tests or validation commands. Done means documenting whether Sealed Secrets is affected and, if appropriate, updating the dependency and confirming the tests pass.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100