Skip to content

Fix: Bump go-version: 1.25.8 to 1.25.9 in ci#1632

Merged
ccojocar merged 1 commit intosecurego:masterfrom
ravisastryk:bump-go-version-ci
Apr 10, 2026
Merged

Fix: Bump go-version: 1.25.8 to 1.25.9 in ci#1632
ccojocar merged 1 commit intosecurego:masterfrom
ravisastryk:bump-go-version-ci

Conversation

@ravisastryk
Copy link
Copy Markdown
Contributor

Bump the go version entry from 1.25.8 to 1.25.9 to resolve 4 stdlib vulnerabilities flagged by govulncheck in CI.

CVE Package Fix
GO-2026-4947 crypto/x509 Chain building DoS
GO-2026-4946 crypto/x509 Policy validation DoS
GO-2026-4870 crypto/tls TLS 1.3 KeyUpdate DoS
GO-2026-4865 html/template JsBraceDepth XSS

@ravisastryk ravisastryk marked this pull request as ready for review April 10, 2026 03:34
@ravisastryk
Copy link
Copy Markdown
Contributor Author

@ccojocar We have a CI environment issue on master branch. The govulncheck Makefile target scans for known Go stdlib vulnerabilities. Please review and merge when you get a chance. Thank you.

@ccojocar ccojocar merged commit b4c4d0b into securego:master Apr 10, 2026
10 of 12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants