The vulnerability CVE-2021-4294 has been fixed, but no specific tag denotes the patched version. about osin HOT 5 CLOSED

I came here after my ide was complaining about this cve. I hadn't realized that this was fixed until I saw your issue @Silence-worker-02. The go tool automatically resolves 1.0.1 as the latest version.

+1 for having a new tag cut.

I did manage to find a work around. If you manually change the version in your go.mod to master and run mod tidy it will resolve to a newer version.

go mod tidy
go: downloading github.com/openshift/osin v1.0.2-0.20220317075346-0f4d38c6e53f

from osin.

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

from osin.

Stale issues rot after 30d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle rotten
/remove-lifecycle stale

from osin.

Rotten issues close after 30d of inactivity.

Reopen the issue by commenting /reopen.
Mark the issue as fresh by commenting /remove-lifecycle rotten.
Exclude this issue from closing again by commenting /lifecycle frozen.

/close

from osin.

@openshift-bot: Closing this issue.

from osin.