client_golang
client_golang copied to clipboard
Yaml V2 Vulnerability
FORTIFY is throwing Yaml V2 vulnerabilities, could you please migrate to new versions
https://github.com/prometheus/common is using lower version
Could you please point give references to vulnerabilities? We can check if the yaml v2 has the security patches we've missed.
Please keep in mind that, certain security scanners raise blanket issues as soon as they see a dependency. We need to check if we're affected.
Hello 👋 Looks like there was no activity on this issue for the last 3 months. Do you mind updating us on the status? Is this still reproducible or needed? If yes, just comment on this PR or push a commit. Thanks! 🤗 If there will be no activity in the next 4 weeks, this issue will be closed (we can always reopen an issue if we need!).
Closing for now as promised, let us know if you need this to be reopened! 🤗