-
Notifications
You must be signed in to change notification settings - Fork 3.8k
Closed
Labels
dependenciesPull requests that update a dependency filePull requests that update a dependency fileexp/beginnerkind/enhancement
Description
Description
There is a still usage on an old (and vulnerable) version of github.com/emicklei/go-restful in pkg/cri/streaming/server.go
➜ containerd git:(v1.6.18) rg "go-restful" go.mod
29: github.com/emicklei/go-restful v2.9.5+incompatible
➜ containerd git:(v1.6.18) go mod why -m github.com/emicklei/go-restful
# github.com/emicklei/go-restful
github.com/containerd/containerd/pkg/cri/streaming
github.com/emicklei/go-restful
➜ containerd git:(v1.6.18) rg "github.com/emicklei/go-restful" pkg/cri
pkg/cri/streaming/server.go
48: restful "github.com/emicklei/go-restful"
Current version of github.com/emicklei/go-restful is v3
Steps to reproduce the issue
No response
Describe the results you received and expected
I expected v3 version to be used.
What version of containerd are you using?
v1.6.18
Any other relevant information
No response
Show configuration if it is related to CRI plugin.
No response
Metadata
Metadata
Assignees
Labels
dependenciesPull requests that update a dependency filePull requests that update a dependency fileexp/beginnerkind/enhancement