You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We (https://github.com/weaveworks/eksctl) use cfssl to create certificate signing requests, thanks for maintaining such an awesome library! We recently got a security warning from dependabot that cfsslv1.6.0 has a dependency on an insecure package github.com/dgrijalva/jwt-go:
$ go mod why github.com/dgrijalva/jwt-go
# github.com/dgrijalva/jwt-go
github.com/weaveworks/eksctl/pkg/addons
github.com/cloudflare/cfssl/csr
github.com/cloudflare/cfssl/helpers
github.com/google/certificate-transparency-go
go.etcd.io/etcd
go.etcd.io/etcd/etcdmain
go.etcd.io/etcd/etcdserver
go.etcd.io/etcd/auth
github.com/dgrijalva/jwt-go
We managed to resolve this issue by pointing at master eksctl-io/eksctl#4175, where this issue was fixed. It would be great if a new tag could be cut 😄
Thanks!
Jake
The text was updated successfully, but these errors were encountered:
hello 👋
We (https://github.com/weaveworks/eksctl) use cfssl to create certificate signing requests, thanks for maintaining such an awesome library! We recently got a security warning from dependabot that
cfssl
v1.6.0
has a dependency on an insecure package github.com/dgrijalva/jwt-go:We managed to resolve this issue by pointing at master eksctl-io/eksctl#4175, where this issue was fixed. It would be great if a new tag could be cut 😄
Thanks!
Jake
The text was updated successfully, but these errors were encountered: