grpc: FIXES CVE-2023-44487.

force grpc version v1.58.3 for all dependencies as this version fixes CVE-2023-44487 FIXES: https://issues.redhat.com/browse/THEEDGE-3618
RedHatInsights · Oct 17, 2023 · db32f74 · db32f74
1 parent 79ef252
commit db32f74
Show file tree

Hide file tree

Showing 2 changed files with 1,198 additions and 39 deletions.
diff --git a/go.mod b/go.mod
@@ -94,4 +94,7 @@ require (
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
 
+// fixes CVE-2023-44487
+replace google.golang.org/grpc => google.golang.org/grpc v1.58.3
+
 go 1.19