New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade golang.org/x/crypto to a version not affected by CVE-2024-45337 #1058

Open

oysteinidematorget opened this issue Dec 17, 2024 · 0 comments

Labels

bug

oysteinidematorget commented Dec 17, 2024

Describe the bug

JFrog XRay report the jfrog CLI tool as vulnerable due to golang.org/x/crypto:0.29.0

Current behavior

JFrog CLI tools reported as vulnerable in JFrog scanning tools.

Reproduction steps

No response

Expected behavior

No response

JFrog Client-Go version

v1.48.0

JFrog CLI version (if applicable)

2.71.4

Operating system type and version

Fedora 40

JFrog Artifactory version

No response

JFrog Xray version

No response

oysteinidematorget added the bug label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment