Ethan Pailes
e8f75629d0
I found this when scanning for security issues in some dependencies. I doubt that this CVE will impact pgconn since I don't think it uses the ssh cropto module, but I think it is worth being fairly agressive about upgrading security sensative libraries and this doesn't seem to be a breaking change.
16 lines
441 B
Modula-2
16 lines
441 B
Modula-2
module github.com/jackc/pgconn
|
|
|
|
go 1.12
|
|
|
|
require (
|
|
github.com/jackc/chunkreader/v2 v2.0.1
|
|
github.com/jackc/pgio v1.0.0
|
|
github.com/jackc/pgmock v0.0.0-20190831213851-13a1b77aafa2
|
|
github.com/jackc/pgpassfile v1.0.0
|
|
github.com/jackc/pgproto3/v2 v2.0.6
|
|
github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b
|
|
github.com/stretchr/testify v1.5.1
|
|
golang.org/x/crypto v0.0.0-20210322153248-0c34fe9e7dc2
|
|
golang.org/x/text v0.3.3
|
|
)
|