Skip to content

fix(deps): update golang.org/x/image to fix medium CVE (OOM via TIFF)#34

Open
sstremovsky wants to merge 1 commit into
securitybunker:masterfrom
sstremovsky:fix/security-deps-20260609
Open

fix(deps): update golang.org/x/image to fix medium CVE (OOM via TIFF)#34
sstremovsky wants to merge 1 commit into
securitybunker:masterfrom
sstremovsky:fix/security-deps-20260609

Conversation

@sstremovsky

Copy link
Copy Markdown

Security Dependency Updates

Resolves Dependabot security alerts by updating vulnerable packages.

Packages updated

  • golang.org/x/image: 0.37.0 → v0.42.0 (CVE: out-of-memory via crafted TIFF; required ≥0.38.0)

Notes

See the Dependabot alerts in the repository Security tab for full CVE details.


🤖 Generated with Claude Code

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Packages updated:
- golang.org/x/image: 0.37.0 → v0.42.0 (CVE: out-of-memory via crafted TIFF; required ≥0.38.0)

Fixes Dependabot security alerts.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants