gorcon/rcon-cli

Critical Vulnerability in the rcon-cli binary

thijsvanloef opened this issue · 4 comments

thijsvanloef commented

Hi! first of all, thank you for creating this package, i've included it by default in my Palworld docker container. I did however find something worth noting.

The binary uses stdlib v1.19.3 which includes multiple Critical and High vulnerabilities.
image

Would it be possible to provide a release with the stdlib updated to a more recent version?

Thanks in advance

thijsvanloef commented

Since this is a standard go library, the solution should be to simply upgrade go in the build.yml workflow and rebuild the binary if i'm not mistaken.

jammsen commented

+1 on this.

jammsen commented

Hey @outdead is there any eta known on when this CVE gets fixed?

  • 👍1
jammsen commented

Hey @outdead - Now its 3 critical and 18 high CVEs in only that package.

Can you please share an eta on when this will be fixed?

image

@thijsvanloef FYI

  • 👍1