mirror of
https://github.com/hashicorp/packer.git
synced 2026-06-09 08:42:33 -04:00
783d5113ba
The reported AWS S3 vulnerability was inherited from the go-getter module that Packer uses for downloading files from external sources. This vulnerability only impacts S3 uploads, therefore Packer is not vulnerable itself as go-getter only downloads such blobs. Since the change required to fix this advisory would be to bump the AWS SDK to v2, this being a major change, is not something to do lightly, so we opted to ignore this advisory for now so it doesn't block upcoming releases. |
||
|---|---|---|
| .. | ||
| docker | ||
| ci.hcl | ||
| packer-artifacts.hcl | ||
| release-metadata.hcl | ||
| security-scan.hcl | ||