Skip to content

[Aikido] Fix security issue in x/net via minor version upgrade from 0.55.0 to 0.56.0#315

Open
aikido-autofix[bot] wants to merge 1 commit into
masterfrom
fix/aikido-security-update-packages-73703607-dty6
Open

[Aikido] Fix security issue in x/net via minor version upgrade from 0.55.0 to 0.56.0#315
aikido-autofix[bot] wants to merge 1 commit into
masterfrom
fix/aikido-security-update-packages-73703607-dty6

Conversation

@aikido-autofix

Copy link
Copy Markdown
Contributor

Upgrade golang.org/x/net to fix DoS vulnerability in DNS record parsing that could cause panics on malformed SVCB/HTTPS records.

✅ 1 CVE resolved by this upgrade

This PR will resolve the following CVEs:

Issue Severity           Description
CVE-2026-46600
HIGH
[golang.org/x/net] Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants