Skip to content

Fix security vulnerabilities in Go dependencies#10

Open
paytheory wants to merge 1 commit intopremainfrom
security-vulnerability-fixes-20250624
Open

Fix security vulnerabilities in Go dependencies#10
paytheory wants to merge 1 commit intopremainfrom
security-vulnerability-fixes-20250624

Conversation

@paytheory
Copy link
Copy Markdown

Summary

  • Fix protobuf DoS vulnerability by updating google.golang.org/protobuf from v1.33.0 to v1.36.6
  • Fix XSS and HTTP proxy bypass vulnerabilities by updating golang.org/x/net from v0.38.0 to v0.41.0
  • Update related dependencies (golang.org/x/sys, golang.org/x/text) to latest versions

Test plan

  • Updated Go module dependencies
  • Ran go mod tidy to clean up dependencies
  • Verified tests pass with updated dependencies
  • Build verification completed

🤖 Generated with Claude Code

- Update google.golang.org/protobuf from v1.33.0 to v1.36.6 (fixes DoS vulnerability)
- Update golang.org/x/net from v0.38.0 to v0.41.0 (fixes XSS and HTTP proxy bypass)
- Update golang.org/x/sys and golang.org/x/text to latest versions

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
Copy link
Copy Markdown

@Srinithya-Indla Srinithya-Indla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved on behalf of pay-theory/code-owners

Copy link
Copy Markdown

@Srinithya-Indla Srinithya-Indla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved on behalf of pay-theory/code-owners

Copy link
Copy Markdown

@Srinithya-Indla Srinithya-Indla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved on behalf of pay-theory/code-owners

Copy link
Copy Markdown

@Srinithya-Indla Srinithya-Indla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved on behalf of pay-theory/code-owners

Copy link
Copy Markdown

@Srinithya-Indla Srinithya-Indla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved on behalf of pay-theory/code-owners

Copy link
Copy Markdown

@Srinithya-Indla Srinithya-Indla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved on behalf of pay-theory/code-owners

Copy link
Copy Markdown

@Srinithya-Indla Srinithya-Indla left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved on behalf of pay-theory/code-owners

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants