Bjyothi2023

Our security scanner reported an vulnerability "CVE-2023-45142" because of go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp version v0.35.1. Issue with : go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp Affected version: v0.35.1 Fixed version: v0.44.0 Requesting you please upgrade go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp version to v0.44.0

Bump Go version from 1.17.13 to 1.19.1 or 1.18.6

2

Vulnerability "CVE-2022-27664" is reported because of "Go" version 1.17.13 Affected packages : go Version reporting vulnerability: 1.17.13 Fix is available in: 1.19.1 or 1.18.6 Please update the go version from...

Bump golang.org/x/net and golang.org/x/net/http2 version to 0.0.0-20220906165146-f3363e06e74c

3

We are seeing CVE-2022-27664 vulnerability reported because of Getmesh having v0.0.0-20210614182718-04defd469f4e Affected packages are : golang.org/x/net , golang.org/x/net/http2 and golang.org/x/net/http/httpguts version reporting this vulnerability : v0.0.0-20210614182718-04defd469f4e Fix is available in...

Bump version of "github.com/golang-jwt/jwt/v4" to v4.4.3

1

### Terraform Version ```shell Terraform version 1.6.3 ``` ### Terraform Configuration Files NA ### Debug Output Security vulnerability "PRISMA-2022-0270" reported because of "github.com/golang-jwt/jwt/v4" version v4.4.2. Fixed version available is v4.4.3...