Cb-tumblebug: Update dependency - github.com/beego/beego

Created on 16 Sep 2021  Β·  4Comments  Β·  Source: cloud-barista/cb-tumblebug

What would you like to be enhanced
:
Update dependency - github.com/beego/beego

Why is this needed
:
Cross Site Scripting (XSS) vulnerability exists in beego ~v2.0.1.
image

Proposed solution
:


[How-to update go.mod]
In github.com/cloud-barista/cb-tumblebug source code directory, execute:
go get github.com/beego/beego/[email protected] or go get github.com/beego/[email protected] (either one that works)

OR

  • Edit go.mod manually
  • Execute either make, go mod tidy, or something else
enhancement good first issue

Most helpful comment

beego v2.0.2 κ°€ 정식 배포되면 μš°μ„  dpendencyλŠ” μˆ˜μ •ν•˜μ—¬ PR을 μ˜¬λ¦¬λ„λ‘ ν•˜κ² μŠ΅λ‹ˆλ‹€.
λ˜ν•œ #754 μ΄μŠˆλ„ μ§€μ†μ μœΌλ‘œ ν™•μΈν•˜μ—¬ beego μ‚¬μš© 여뢀도 ν™•μΈν•˜κ² μŠ΅λ‹ˆλ‹€.

κ°μ‚¬ν•©λ‹ˆλ‹€.

All 4 comments

λ§Œμ•½ 이슈 #754 κ°€ resolve 되면, 이 μ΄μŠˆλŠ” no more valid ν•˜λ―€λ‘œ close ν•˜λ©΄ λ˜κ² μŠ΅λ‹ˆλ‹€. 😊

ν•΄λ‹Ή μ΄μŠˆλŠ” μ‹ κ·œ μ»¨νŠΈλ¦¬λ·°ν„°λ₯Ό μœ„ν•œ μ΄μŠˆμž…λ‹ˆλ‹€. (go.mod μ—…λ°μ΄νŠΈ)

λ‹€λ§Œ @jihoon-seo κ»˜μ„œ μ•ˆλ‚΄ν•΄μ£Όμ‹  바와 같이, #754 beego νŒ¨ν‚€μ§€ 자체λ₯Ό ν™œμš©ν•˜μ§€ μ•Šκ²Œ λ˜λŠ” 경우
go.mod μ—μ„œ beego νŒ¨ν‚€μ§€ μžμ²΄κ°€ μ‚­μ œ λ˜μ–΄μ•Ό ν•©λ‹ˆλ‹€.

μ‹ κ·œ μ»¨νŠΈλ¦¬λ·°ν„°κ»˜μ„œλŠ”, 이 이슈 λ˜λŠ” #754 λ₯Ό 각각 λ˜λŠ” ν•¨κ»˜ κ³ λ €ν•˜μ—¬ κΈ°μ—¬λ₯Ό μ§„ν–‰ν•΄ 보싀 수 μžˆμŠ΅λ‹ˆλ‹€.

beego v2.0.2 κ°€ 정식 배포되면 μš°μ„  dpendencyλŠ” μˆ˜μ •ν•˜μ—¬ PR을 μ˜¬λ¦¬λ„λ‘ ν•˜κ² μŠ΅λ‹ˆλ‹€.
λ˜ν•œ #754 μ΄μŠˆλ„ μ§€μ†μ μœΌλ‘œ ν™•μΈν•˜μ—¬ beego μ‚¬μš© 여뢀도 ν™•μΈν•˜κ² μŠ΅λ‹ˆλ‹€.

κ°μ‚¬ν•©λ‹ˆλ‹€.

/assign @ChobobDev

Was this page helpful?
0 / 5 - 0 ratings

Related issues

seokho-son picture seokho-son  Β·  5Comments

jihoon-seo picture jihoon-seo  Β·  4Comments

jihoon-seo picture jihoon-seo  Β·  6Comments

jihoon-seo picture jihoon-seo  Β·  3Comments

seokho-son picture seokho-son  Β·  3Comments