Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependencies to mitigate scanner-detected vulnerabilities #266

Closed
wants to merge 2 commits into from
Closed

Update dependencies to mitigate scanner-detected vulnerabilities #266

wants to merge 2 commits into from

Commits on Oct 3, 2024

  1. Update grafana-plugin-sdk-go to mitigate CVE-2024-8986 

    Hi folks,

I don't know if this naive change actually works by itself, but if it does and it's not too much trouble, could you publish a new version that mitigates this vulnerability? It's marked in scanners as 'critical' which makes it a bit problematic for us to use.

See: https://grafana.com/security/security-advisories/cve-2024-8986/
    @robmoore-i
    robmoore-i authored Oct 3, 2024
    Configuration menu
    Copy the full SHA
    833ba30 View commit details
    Browse the repository at this point in the history

  2. A few more dependency updates 

    Mitigates these 'high' severity vulnerabilities caught by Trivy:
- https://avd.aquasec.com/nvd/cve-2023-47108
- https://avd.aquasec.com/nvd/cve-2023-45142
- https://avd.aquasec.com/nvd/cve-2023-39325
- GHSA-m425-mq94-257g
    @robmoore-i
    robmoore-i authored Oct 3, 2024
    Configuration menu
    Copy the full SHA
    075342b View commit details
    Browse the repository at this point in the history