Golang vulnerabilities in v0.13.1

[FabienLfy]

Envconsul version

envconsul v0.13.1

CVE Vulnerabilities

Here is a list of Golang vulnerabilities that can be fixed by doing a version upgrade of the package:

• CVE-2022-41716 -> fixed in 1.19.3, 1.18.8
• CVE-2022-2879 -> fixed in 1.19.2, 1.18.7
• CVE-2022-41715 -> fixed in 1.19.2, 1.18.7
• CVE-2022-2880 -> fixed in 1.19.2, 1.18.7

[Woolleysi]

In addition, Trivy scanner identifies vulnerabilities in:

golang.org/x/net

• CVE-2022-41721
• CVE-2022-41723
• CVE-2022-41717

golang.org/x/text

• CVE-2022-32149

Thanks

[marrws]

In addition, Trivy scanner identifies vulnerabilities in:

golang.org/x/net

• CVE-2022-41721
• CVE-2022-41723
• CVE-2022-41717

This has been addressed by the bot in #344 and #347

golang.org/x/text
* CVE-2022-32149
Thanks

This one should be solved by 2794ee0

[marrws]

@hc-github-team-es-release-engineering Since #344 and #347 have been merged. Can we get a new release of envcosul with these fixes?