You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
There are a few security vulnerabilities being reported in the go stdlib version that the temporal UI uses. It would be ideal if Temporal UI could upgrade out of these vulnerabilities in the next version
Describe the bug
There are a few security vulnerabilities being reported in the go stdlib version that the temporal UI uses. It would be ideal if Temporal UI could upgrade out of these vulnerabilities in the next version
https://nvd.nist.gov/vuln/detail/cve-2023-45288
https://nvd.nist.gov/vuln/detail/CVE-2024-24788
https://nvd.nist.gov/vuln/detail/CVE-2024-24787
To Reproduce
Pull down the temporal ui from docker
Run a grype image scan on the docker image
Expected behavior
grype scan should not report any vulnerabilities in the image
Screenshots
![Untitled 4](https://private-user-images.githubusercontent.com/8581332/400052791-c042abe1-75bf-4153-af74-975204c0fe24.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MzkzODc5MTUsIm5iZiI6MTczOTM4NzYxNSwicGF0aCI6Ii84NTgxMzMyLzQwMDA1Mjc5MS1jMDQyYWJlMS03NWJmLTQxNTMtYWY3NC05NzUyMDRjMGZlMjQucG5nP1gtQW16LUFsZ29yaXRobT1BV1M0LUhNQUMtU0hBMjU2JlgtQW16LUNyZWRlbnRpYWw9QUtJQVZDT0RZTFNBNTNQUUs0WkElMkYyMDI1MDIxMiUyRnVzLWVhc3QtMSUyRnMzJTJGYXdzNF9yZXF1ZXN0JlgtQW16LURhdGU9MjAyNTAyMTJUMTkxMzM1WiZYLUFtei1FeHBpcmVzPTMwMCZYLUFtei1TaWduYXR1cmU9OTVjNjEwNjJkNzVkMzIwODYyZmEyZDI5YzNjMTU3YzhjOTEzNTFhN2JlNTc4OWI4NzI4NzA3ZDhmOTY1NjgwNCZYLUFtei1TaWduZWRIZWFkZXJzPWhvc3QifQ.-Oy75KtAHPPouMEHjmARmveG5Oze14bx1-hWroyXQ5g)
Additional context
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered: