hyperledger / hyperledger/fabric
Please help to resolve vulnerabilities in fabric binaries ( peer , configtxgen ) - 2.2
- Dominant language
- Go
- Stars
- 16.7k
- Forks
- 9.1k
- Avg merge
- 5h 38m
- Merged PRs (30d)
- 26
Description
I am working with fabric 2.2 network and using below binaries for one of the functionality in my application. So I have pushed these binaries to the repository and when I run the Jenkins build I see that some vulnerabilities with **Trivy** scanner. Please help to resolve these vulnerabilities .
### **configtxgen** Binary:
- golang.org/x/crypto : CVE-2021-43565, CVE-2022-27191, GHSA-8c26-wmh5-6g9v, GHSA-gwc9-m7rh-j2ww2.
- golang.org/x/net : CVE-2021-44716, CVE-2022-276644.
- golang.org/x/sys : CVE-2022-29526
### **peer** Binary:
- github.com/containerd/containerd : CVE-2021-41103, CVE-2022-23648, CVE-2020-15257, CVE-2021-21334, CVE-2021-32760, CVE-2022-31030, GHSA-5ffw-gxpp-mxpf, GHSA-5j5w-g665-5m35
- github.com/gogo/protobuf: CVE-2021-3121, GHSA-c3h9-896r-86jm
- github.com/opencontainers/image-spec: GHSA-77vh-xpmg-72qh
- github.com/opencontainers/runc : CVE-2019-16884, CVE-2019-19921, CVE-2022-29162, CVE-2022-24769, GHSA-fgv8-vj5c-2ppq, GHSA-fh74-hm69-rqjw,GHSA-g54h-m393-cpwq
- github.com/prometheus/client_golang: CVE-2022-21698, GHSA-cg3q-j54f-5p7p
- golang.org/x/crypto : CVE-2021-43565, CVE-2022-27191, GHSA-8c26-wmh5-6g9v, GHSA-gwc9-m7rh-j2ww
- golang.org/x/net : CVE-2021-44716, CVE-2022-27664
- golang.org/x/sys: CVE-2022-29526
Contributor guide
Assessment
This issue has not been assessed yet.