Skip to content

Commit a4ecccc

Browse files
navinms711prkalle
authored andcommitted
Update Go version to 1.25.5 to address CVE-2025-61729 (cloudfoundry#3682)
CVE-2025-61729 (GO-2025-4155) is a high-severity vulnerability affecting Go versions < 1.24.11 and 1.25.0-1.25.4. The vulnerability causes excessive resource consumption in printing error strings for host certificate validation. This commit updates the Go version from 1.25.4 to 1.25.5, which includes the fix for this CVE. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-61729
1 parent 75c5776 commit a4ecccc

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module code.cloudfoundry.org/cli
22

3-
go 1.25.0
3+
go 1.25.5
44

55
require (
66
code.cloudfoundry.org/bytefmt v0.54.0

0 commit comments

Comments
 (0)