Description

Fix CVE-2022-41717 which comes from golang.org/x/net package.

Reference: https://github.com/golang/go/issues/56350

Environment

  • go version: 1.19
  • gin version (or commit ref): v1.8.1
  • operating system: Linux (Ubuntu)

Comment From: SaradaSastri

Few other HIGH CVE's too are coming from golang.org/x/net "CVE-2022-41717--medium CVE-2022-27664--high CVE-2021-33194--high CVE-2021-44716--high CVE-2021-31525--medium"

Comment From: soumiksamanta

@appleboy when will the v1.8.2 be released? Thanks

Comment From: appleboy

@soumiksamanta see https://github.com/gin-gonic/gin/pull/3432