New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade "golang.org/x/crypto" version #476

Open

zyl423 opened this issue Dec 20, 2024 · 1 comment · May be fixed by #477

zyl423 commented Dec 20, 2024

We need upgrade "golang.org/x/crypto" version to fix the vulnerability: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

kszarek linked a pull request

that will close this issue

Update golang.org/x/crypto to 0.31.0 #477

Open

weinguy-env0 commented Jan 2, 2025

We encountered this in our scanning as well, releasing a new version with this bump will be helpful 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment