Repository navigation
Go and go-viper update request #13003
Description
Hello, is it possible to update Go to 1.24.4 and github.com/go-viper/mapstructure/v2 to 2.3.0?
Our security scans showed that Go 1.23.8 suffers from CVE-2025-4673 and CVE-2025-0913, and go-viper 2.0.0 suffers from GHSA-fv92-fjc5-jj9h.
Thanks!
Metadata
Metadata
Assignees
Labels
No labels
Activity
glours commentedon Jul 1, 2025
Hey @mdipirro
We need to be aligned with moby/moby golang version for release purposes so we won't be able to switch to Go 1.24.4 for now, but I'll look if there isn't any security patch available for 1.23.x version and will look to
go-viperupdate 👍glours commentedon Jul 1, 2025
@mdipirro Done! The 2 PRs are ready to be reviewed
mdipirro commentedon Jul 1, 2025
@glours real quick! Thanks so much!