andersfylling / disgord-starter

Template repository for Disgord bots

disgord-starter

Template repository for Disgord bots

This is a starter repo for the project https://github.com/andersfylling/disgord

disgord-starter's Issues

同学，您这个项目引入了51个开源组件，存在1个漏洞，辛苦升级一下

检测到 andersfylling/disgord-starter 一共引入了51个开源组件，存在1个漏洞

漏洞标题：Gin-Gonic Gin 环境问题漏洞
缺陷组件：github.com/gin-gonic/[email protected]
漏洞编号：CVE-2020-28483
漏洞描述：Gin-Gonic Gin是Gin-Gonic团队的一个基于Go语言的用于快速构建Web应用的框架。
github.com/gin-gonic/gin 全部版本存在安全漏洞，该漏洞源于可以通过设置X-Forwarded-For头来欺骗客户端的IP。
影响范围：(∞, 1.7.7)
最小修复版本：1.7.7
缺陷组件引入路径：main@->github.com/gin-gonic/[email protected]

另外还有几个漏洞，详细报告：https://mofeisec.com/jr?p=ad087f

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update module github.com/andersfylling/disgord to v0.36.2
• fix(deps): update module github.com/sirupsen/logrus to v1.9.3
• chore(deps): update actions/checkout action to v4
• chore(deps): update actions/setup-go action to v5
• chore(deps): update dependency ubuntu to v22
• Click on this checkbox to rebase all open PRs at once

Detected dependencies

dockerfile

Dockerfile

github-actions

.github/workflows/code-quality.yaml

• actions/setup-go v3
• actions/checkout v3
• actions/setup-go v3
• actions/checkout v3
• ubuntu 20.04
• ubuntu 20.04

gomod

go.mod

• go 1.15
• github.com/andersfylling/disgord v0.35.1
• github.com/sirupsen/logrus v1.8.1

---

• Check this box to trigger a request for Renovate to run again on this repository