Tuleap Community Edition development and releases are no longer public. You have until September 30th to download packages and sources in Tuleap project. You can contact the team if you need further assistance.

    •  
      request #37227 Temporarily ignore gopkg.in/go-jose/go-jose.v2 CVE-2024-28180
    Infos
    #37227
    Thomas Gerbet (tgerbet)
    2024-03-19 11:16
    2024-03-19 09:34
    38876
    Details
    Temporarily ignore gopkg.in/go-jose/go-jose.v2 CVE-2024-28180

    No real impact in the Tuleap use case as we do not rely on JWE and current state of the dependencies tree does not allow a straightforward fix right now.

    Other
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2024-03-19
    Attachments
    Empty
    References
    Referencing request #37227
    Referenced by request #37227

    Follow-ups