Skip to content

Upd vulnerable dependency - #560

Merged
oksana-grishchenko merged 2 commits into
mainfrom
upd-vulnerable-dependency
Jul 30, 2026
Merged

Upd vulnerable dependency#560
oksana-grishchenko merged 2 commits into
mainfrom
upd-vulnerable-dependency

Conversation

@oksana-grishchenko

@oksana-grishchenko oksana-grishchenko commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

Fixes trivy report:

app (gobinary)
  ==============
  Total: 1 (HIGH: 1, CRITICAL: 0)
  
  ┌───────────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬────────────────────────────────────────────────────────────┐
  │      Library      │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                           Title                            │
  ├───────────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼────────────────────────────────────────────────────────────┤
  │ golang.org/x/text │ CVE-2026-56852 │ HIGH     │ fixed  │ v0.38.0           │ 0.39.0        │ A norm.Iter can enter an infinite loop when handling input │
  │                   │                │          │        │                   │               │ containing ...                                             │
  │                   │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-56852                 │
  └───────────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴────────────────────────────────────────────────────────────┘
  

@JNKPercona

Copy link
Copy Markdown
Contributor
Test name Status
api-tests passed

@oksana-grishchenko
oksana-grishchenko merged commit fc4c1c3 into main Jul 30, 2026
3 checks passed
@oksana-grishchenko
oksana-grishchenko deleted the upd-vulnerable-dependency branch July 30, 2026 08:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants