stackup-bundler icon indicating copy to clipboard operation
stackup-bundler copied to clipboard

fix: upgrade github.com/gin-contrib/cors to latest version to address CVE-2019-25211

Open zepeng811 opened this issue 6 months ago • 0 comments

Problem Description

We need to patch https://github.com/gin-contrib/cors to 1.6.0+ to address CVE-2019-25211

Solution

Executed the following to upgrade to the latest version (v1.7.2 as of Aug 12, 2024) for github.com/gin-contrib/cors

go get github.com/gin-contrib/[email protected]
go mod tidy

There should be no breaking changes according to the release notes from v1.4.0 -> v.1.7.2: https://github.com/gin-contrib/cors/releases

zepeng811 avatar Aug 12 '24 17:08 zepeng811