sentry-go icon indicating copy to clipboard operation
sentry-go copied to clipboard

Bump bluemonday from v1.0.2 to v1.0.16+ (vulnerability fix)

Open bhmj opened this issue 2 years ago • 0 comments

Summary

The current Sentry-go release (v0.13.0) depends on github.com/microcosm-cc/[email protected] which contains a vulnerability CVE-2021-42576 rated as Critical.

Please bump up the imported bluemonday version to 1.0.16+ since the vulnerability was fixed as described here.

bhmj avatar May 26 '22 12:05 bhmj