gruntwork-io / gruntwork-io/gruntwork-installer
Gruntwork Installer Installing Vulnerable Fetch Package
Open
enhancement
- Dominant language
- Shell
- Stars
- 92
- Forks
- 55
- PR merge metrics
- No merged PRs in 30d
Description
Gruntwork installer needs to install an updated version of fetch. It is also possible that fetch will need to be patched after gruntwork install is installing the updated version. I am not sure if the most recent fetch release is patched.
Fetch details:
- CVE-2022-27664
Installed version: 1.16.2
Patched version: 1.18.6
Paths: /usr/local/bin/fetch
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.