Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update gopkg.in/yaml.v2 to gopkg.in/yaml.v3 #156

Merged
merged 2 commits into from Jun 13, 2022
Merged

Update gopkg.in/yaml.v2 to gopkg.in/yaml.v3 #156

merged 2 commits into from Jun 13, 2022

Conversation

1995parham
Copy link
Contributor

@1995parham 1995parham commented May 26, 2022 •
edited

CVE-2022-28948
An issue in the Unmarshal function in Go-Yaml v3 causes the program to crash when attempting to deserialize invalid input.
Affected versions < 3.0.0
Patched version 3.0.0

Signed-off-by: Parham Alvani parham.alvani@gmail.com

@1995parham 1995parham marked this pull request as draft May 26, 2022 12:11
@1995parham
Copy link
Contributor Author

This package change map signature to map[string]interface{} from map[interface{}]interface{}. Also in marshaling it creates intent for arrays and also increase one tab intent to 2 tab intent (you can check this on yaml_test).

@1995parham 1995parham marked this pull request as ready for review May 26, 2022 12:21
@1995parham
Copy link
Contributor Author

@knadh ready for review.

@knadh knadh merged commit c956b0d into knadh:master Jun 13, 2022
@knadh
Copy link
Owner

knadh commented Jun 13, 2022

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@1995parham @knadh