Skip to content

Comments

Update golang + golangci-lint to resolve CVEs#712

Merged
devanshuVmware merged 2 commits intocarvel-dev:developfrom
CodesbyUnnati:bump-golang-1.25.5
Feb 17, 2026
Merged

Update golang + golangci-lint to resolve CVEs#712
devanshuVmware merged 2 commits intocarvel-dev:developfrom
CodesbyUnnati:bump-golang-1.25.5

Conversation

@CodesbyUnnati
Copy link
Member

@CodesbyUnnati CodesbyUnnati commented Jan 17, 2026

This PR resolves the below CVEs:

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬──────────────────────────────┬─────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Status │ Installed Version │        Fixed Version         │                          Title                          │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼──────────────────────────────┼─────────────────────────────────────────────────────────┤
│ stdlib  │ CVE-2025-68121 │ CRITICAL │ fixed  │ v1.25.6           │ 1.24.13, 1.25.7, 1.26.0-rc.3 │ crypto/tls: Unexpected session resumption in crypto/tls │
│         │                │          │        │                   │                              │ https://avd.aquasec.com/nvd/cve-2025-68121              │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴──────────────────────────────┴─────────────────────────────────────────────────────────┘

Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>
Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>
@devanshuVmware devanshuVmware merged commit 8af1ddf into carvel-dev:develop Feb 17, 2026
7 of 10 checks passed
@github-project-automation github-project-automation bot moved this to Closed in Carvel Feb 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Closed

Development

Successfully merging this pull request may close these issues.

2 participants