botan icon indicating copy to clipboard operation
botan copied to clipboard

Vulnerability warning due to dependency to oudated OpenSSL 1.0.1g

Open andre2007 opened this issue 5 years ago • 0 comments
trafficstars

In my project I do neither use Botan / OpenSSL but only Vibe-D with notls set. But the dub.json dependency tree is analyzed and therefore the dependency defined here (https://github.com/etcimon/botan/blob/master/dub.json#L75) is found.

OpenSSL 1.0.1 is oudated and marked by scanners as vulnerable. Could you please switch to OpenSSL 1.1.0? (2.0.0+1.1.0h or 2.0.1+1.1.0h)

andre2007 avatar Jun 22 '20 11:06 andre2007