carlescere/scheduler

indirect vulnerability

Closed this issue · 1 comments

zhenisduissekov commented

Unfortunately, the scheduler uses yaml.v2 library, which has a vulnerability. I hope there will be a plan to update the scheduler to exclude this library.

this is how it looks in go.mod
gopkg.in/yaml.v2 v2.4.0 // indirect

zhenisduissekov commented

I am so sorry, I made a mistake. The scheduler does not have a vulnerability
sorry