envoyproxy / envoyproxy/gateway

CVE: go-difflib dependency EOL

Open
#6,527 6 comments 0 reactions 0 assignees View on GitHub
stale triage
Dominant language
Go
Stars
3k
Forks
864
Avg merge
2d 2h
Merged PRs (30d)
140

Description

*Description*:
The go-difflib indirect dependency is end of life and causing CVE warnings.

*Repro steps*:
Scan with vurnerability scanner

*Environment*:
latest envoy gateway

THIS PACKAGE IS NO LONGER MAINTAINED.

At this point, I have no longer the time nor the interest to work on go-difflib. I apologize for the inconvenience.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.