Closed
Description
Can you please update to 3.0.1 to resolve CVE-2022-28948? I'm getting Dependabot alerts because I have a dependency on this library which depends on an old version of gopkg.in/yaml.v3
.
$ go mod why gopkg.in/yaml.v3
# gopkg.in/yaml.v3
cloud-z/cmd
github.com/jedib0t/go-pretty/v6/text
github.com/jedib0t/go-pretty/v6/text.test
github.com/stretchr/testify/assert
gopkg.in/yaml.v3
$ grep gopkg.in/yaml.v3 go.sum
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b h1:h8qDotaEPuJATrMmW04NCwg7v22aHH28wwpauUhK9Oo=
gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
Metadata
Metadata
Assignees
Labels
No labels