Skip to content

Commit 0eb8452

Browse files
authored
Merge pull request #14 from alauda/fix/cve
fix go-jose.v2 package
2 parents 4ce8e10 + a7e4706 commit 0eb8452

File tree

3 files changed

+5
-5
lines changed

3 files changed

+5
-5
lines changed

go.mod

+1-1
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ require (
1919
go.uber.org/zap v1.23.0
2020
golang.org/x/crypto v0.21.0
2121
gopkg.in/fsnotify.v1 v1.4.7
22-
gopkg.in/square/go-jose.v2 v2.6.0
22+
gopkg.in/go-jose/go-jose.v2 v2.6.3
2323
k8s.io/api v0.24.4
2424
k8s.io/apimachinery v0.24.4
2525
k8s.io/client-go v0.0.0-00010101000000-000000000000

go.sum

+2-2
Original file line numberDiff line numberDiff line change
@@ -760,12 +760,12 @@ gopkg.in/check.v1 v1.0.0-20200227125254-8fa46927fb4f/go.mod h1:Co6ibVJAznAaIkqp8
760760
gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
761761
gopkg.in/fsnotify.v1 v1.4.7 h1:xOHLXZwVvI9hhs+cLKq5+I5onOuwQLhQwiu63xxlHs4=
762762
gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
763+
gopkg.in/go-jose/go-jose.v2 v2.6.3 h1:nt80fvSDlhKWQgSWyHyy5CfmlQr+asih51R8PTWNKKs=
764+
gopkg.in/go-jose/go-jose.v2 v2.6.3/go.mod h1:zzZDPkNNw/c9IE7Z9jr11mBZQhKQTMzoEEIoEdZlFBI=
763765
gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
764766
gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
765767
gopkg.in/ini.v1 v1.66.4 h1:SsAcf+mM7mRZo2nJNGt8mZCjG8ZRaNGMURJw7BsIST4=
766768
gopkg.in/ini.v1 v1.66.4/go.mod h1:pNLf8WUiyNEtQjuu5G5vTm06TEv9tsIgeAvK8hOrP4k=
767-
gopkg.in/square/go-jose.v2 v2.6.0 h1:NGk74WTnPKBNUhNzQX7PYcTLUjoq7mzKk2OKbvwk2iI=
768-
gopkg.in/square/go-jose.v2 v2.6.0/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI=
769769
gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ=
770770
gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
771771
gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=

pkg/server/auth.go

+2-2
Original file line numberDiff line numberDiff line change
@@ -23,8 +23,8 @@ import (
2323
"github.com/google/uuid"
2424
"github.com/pkg/errors"
2525
"golang.org/x/crypto/bcrypt"
26-
"gopkg.in/square/go-jose.v2"
27-
"gopkg.in/square/go-jose.v2/jwt"
26+
"gopkg.in/go-jose/go-jose.v2"
27+
"gopkg.in/go-jose/go-jose.v2/jwt"
2828
"k8s.io/apimachinery/pkg/util/yaml"
2929
"k8s.io/client-go/util/keyutil"
3030
)

0 commit comments

Comments
 (0)