New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

upgrade of appengine depedency to >=v2.0.2 to address CVE-2020-14040, CVE-2021-38561 #580

Closed

ghost opened this issue Aug 11, 2022 · 1 comment

ghost commented Aug 11, 2022

The appengine downstream module only fixed x/text CVE vulnerabilities in v2.0.2 tag golang/appengine#287 and not on the v1.x track.

Is there any plan to upgrade the dependencies in this repo to work with appengine v2.0.2 or later, so that the vulnerabilities no longer apply?

Member

seankhliao commented Jan 7, 2023

this is unreachable via x/oauth2

seankhliao closed this as not planned

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment