Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CVE-2024-45338 vulnerability in the software golang.org/x/net-0.23.0 #1685

Open
yoliinyk opened this issue Feb 18, 2025 · 1 comment
Open

Comments

@yoliinyk
Copy link

yoliinyk commented Feb 18, 2025

Hello team,

Our security team informed, that newrelic cli using vulnerability in the software golang.org/x/net-0.23.0.

Path: /usr/local/bin/newrelic
Vulnerable Package: golang.org/x/net-0.23.0
Patched Versions: 0.33.0

I see, you already have PR with the updated version: #1681

Please take a look.

Thanks.

@yoliinyk yoliinyk changed the title CVE-2024-45338 vulnerability in the software golang.org/x/net-0.23.0 , with a CVSS score of 7.5. CVE-2024-45338 vulnerability in the software golang.org/x/net-0.23.0 Feb 18, 2025
@Aashirwadjain
Copy link

Hi @yoliinyk, Thanks for bringing this to us. This is already in our to-do list and as you have correctly mentioned, the PR for this is already present. We are planning to review and merge the PR in some time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants