getting vulnerability alert, got latest version of github.com/volatiletech/sqlboiler/v4 v4.18.0, still getting this alert

[umakantyadav1978]

There is a vulnerability (Severity: High) in version v1.46.2 of component google.golang.org/grpc.
Package dependency tree:

/Users/uyadav/Work/Prebid_Work/Repository/insights/app_insights-api/go.mod
├─┬ github.com/volatiletech/sqlboiler/v4 v4.18.0 - Go
│ └─┬ github.com/spf13/viper v1.12.0 - Go
│ └── google.golang.org/grpc v1.46.2 - Go
├─┬ github.com/sagikazarmark/crypt v0.6.0 - Go
│ └── google.golang.org/grpc v1.46.2 - Go
└─┬ google.golang.org/api v0.81.0 - Go
└── google.golang.org/grpc v1.46.2 - Go

[aarondl]

This is benign. We don't use grpc in sqlboiler. Until we bump viper to fix this, you can bump the affected library in your own go.mod to fix it if you're concerned.

$ go mod why google.golang.org/grpc
# google.golang.org/grpc
(main module does not need package google.golang.org/grpc)