Skip to content

dependencies: update crypto to fix CVE #637

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from

Conversation

smikes
Copy link

@smikes smikes commented Apr 14, 2025

Fixes issue #15680

Fix golang/vulndb#3328
Github GHSA-v778-237x-gjrc

NOTE: there is no known exploit of this code via tailscale and I do not believe tailscale-android even used the at-risk code path

Fixes issue #15680

Fix golang/vulndb#3328
Github GHSA-v778-237x-gjrc

NOTE: there is no known exploit of this code via tailscale
and I do not believe tailscale-android even used the at-risk
code path

Signed-off-by: Sam Mikes (He/him/his) <sam.mikes@gm.com>
Copy link

review-ai-agent bot commented Apr 14, 2025

Pull Request Revisions

RevisionDescription
r1
Dependency versions incrementally updatedMinor version bumps for Go dependencies including crypto, sync, sys, term, and text packages across go.mod and go.sum
✅ AI review completed for r1
Help React with emojis to give feedback on AI-generated reviews:
  • 👍 means the feedback was helpful and actionable
  • 👎 means the feedback was incorrect or unhelpful
💬 Replying to feedback with a comment helps us improve the system. Your input also contributes to shaping future interactions with the AI reviewer.

We'd love to hear from you—reach out anytime at team@review.ai.

@raggi
Copy link
Member

raggi commented Apr 15, 2025

fixed by #639

@raggi raggi closed this Apr 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

x/vulndb: potential Go vuln in golang.org/x/crypto: GHSA-v778-237x-gjrc
2 participants