Code

Update dependencies to address CVEs#1

Code

Draft

AlexsandroRyan wants to merge 14 commits intov0.34.xvouchio/cometbft:v0.34.xfrom pkg-updates-checkmarx-cvesvouchio/cometbft:pkg-updates-checkmarx-cvesCopy head branch name to clipboard

+306-290

Commits

Commits on Aug 13, 2024

• Updated github.com/btcsuite/btcd/btcutil to address CVE-2022-44797

  Show description for f696e52
  AlexsandroRyan

  committed
  f696e52

  Copy full SHA for f696e52

• Updated github.com/moby/buildkit to address CVE-2024-23653

  Show description for 960870c
  AlexsandroRyan

  committed
  960870c

  Copy full SHA for 960870c

• Updated github.com/nats-io/nats-server/v2 to address CVE-2022-28357

  Show description for f5787ef
  AlexsandroRyan

  committed
  f5787ef

  Copy full SHA for f5787ef

Commits on Aug 14, 2024

• Previous update of github.com/moby/buildkit addressed CVE-2022-1996

  Show description for 87ce1de
  AlexsandroRyan

  committed
  87ce1de

  Copy full SHA for 87ce1de

• Updated of github.com/bufbuild/buf to address CVE-2024-23652 and CVE-2024-23653

  Show description for ed6b8a2
  AlexsandroRyan

  committed
  ed6b8a2

  Copy full SHA for ed6b8a2

• Previous update of github.com/nats-io/nats-server/v2 addressed CVE-2022-24450

  Show description for ed3123f
  AlexsandroRyan

  committed
  ed3123f

  Copy full SHA for ed3123f

• Updated github.com/adlio/schema to address CVE-2023-28840

  Show description for a20047a
  AlexsandroRyan

  committed
  a20047a

  Copy full SHA for a20047a

• Previous update of github.com/adlio/schema addressed CVE-2024-21626

  Show description for 205f49c
  AlexsandroRyan

  committed
  205f49c

  Copy full SHA for 205f49c

• syncronized dependencies with 'go mod tidy' command

  AlexsandroRyan

  committed
  7202a5a

  Copy full SHA for 7202a5a

• Previous update of github.com/adlio/schema addressed CVE-2023-28642

  Show description for 45585a4
  AlexsandroRyan

  committed
  45585a4

  Copy full SHA for 45585a4

• Updated fonttools version to address CVE-2023-45139

  AlexsandroRyan

  committed
  b61dc88

  Copy full SHA for b61dc88

• Previous update of github.com/adlio/schema addressed CVE-2023-27561

  Show description for 5dc13d1
  AlexsandroRyan

  committed
  5dc13d1

  Copy full SHA for 5dc13d1

Commits on Aug 15, 2024

• Updated github.com/btcsuite/btcd/btcutil version to address CVE-2024-23651

  Show description for 23e5057
  AlexsandroRyan

  committed
  23e5057

  Copy full SHA for 23e5057

Commits on Aug 16, 2024

• chore: updated go package

  AlexsandroRyan

  committed
  7d767b7

  Copy full SHA for 7d767b7