FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

fix(security): remediate CVE vulnerabilities in release-0.4 by upbound-bot · Pull Request #50 · upbound/function-claude · GitHub

fix(security): remediate CVE vulnerabilities in release-0.4 - #50

Merged
ulucinar merged 1 commit into
release-0.4from
fix/cve-remediation-release-0.4-20260825-134403
Aug 25, 2026
Merged

ulucinar merged 1 commit into
release-0.4from
fix/cve-remediation-release-0.4-20260825-134403

Conversation

Copy link
Copy Markdown

Summary

This PR fixes CVE vulnerabilities identified by security scanning.

Vulnerabilities Fixed

CVE/GHSA Severity Package Fixed Version
GO-2026-5026 High stdlib go1.25.13
GO-2026-5972 High stdlib go1.25.13
GO-2026-6088 High stdlib go1.25.13
GO-2026-6089 High stdlib go1.25.13
GO-2026-6090 High stdlib go1.25.13
GO-2026-6218 Medium stdlib go1.25.13
GO-2026-6091 Medium stdlib go1.25.13

Changes Made

  • Updated Go version from 1.25.12 to 1.25.13 in go.mod
  • Updated GO_VERSION from 1.25.12 to 1.25.13 in .github/workflows/ci.yml
  • Ran go mod tidy to update dependencies

References

Verification

  • Rescanned with `cve-scan` skill after fixes
  • All listed vulnerabilities resolved

- Update Go version to 1.25.13 (fixes GO-2026-5026, GO-2026-5972, GO-2026-6088, GO-2026-6089, GO-2026-6090, GO-2026-6218, GO-2026-6091)
- Update CI workflow Go version to 1.25.13

Signed-off-by: Alper Rifat Ulucinar <ulucinar@users.noreply.github.com>
ulucinar merged commit 98bf7c1 into release-0.4 Aug 25, 2026
6 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants


Back | FazBrowse Home | New Git URL