jesseduffield / jesseduffield/lazygit

Security: golang.org/x/net 0.7.0 has vulnerabilities

Open
#4,124 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Go
Stars
82.4k
Forks
3k
Avg merge
2d 18h
Merged PRs (30d)
19

Description

**Describe the bug**
It seems `net` dependency has vulnerabilities. Since its an indirect dependency may be the dependency can be upgraded?

**To Reproduce**
Steps to reproduce the behavior:

1. Create a Dockerfile with alpine:latest
2. add apk for lazygit
3. view security scan for docker image
4. See error

**Expected behavior**
A clear and concise description of what you expected to happen.

**Screenshots**
If applicable, add screenshots to help explain your problem.
image

**Version info:**
_Run `lazygit --version` and paste the result here_
commit=, build date=, build source=unknown, version=0.44.1, os=linux, arch=arm64, git version=2.47.1
_Run `git --version` and paste the result here_
git version 2.47.1

**Additional context**
Add any other context about the problem here.

https://scout.docker.com/vulnerabilities/id/CVE-2024-45338
https://scout.docker.com/vulnerabilities/id/CVE-2023-39325

**Note:** please try updating to the latest version or [manually building](https://github.com/jesseduffield/lazygit/#manual) the latest `master` to see if the issue still occurs.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.