Skip to content

fix(deps): vuln minor: golang.org/x/net, golang.org/x/sys #549

Merged
julesmcrt merged 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/1-1783380019
Jul 7, 2026
Merged

fix(deps): vuln minor: golang.org/x/net, golang.org/x/sys #549
julesmcrt merged 1 commit into
mainfrom
engraver-auto-version-upgrade/minorpatch/go/1-1783380019

Conversation

@gh-worker-campaigns-3e9aa4

Copy link
Copy Markdown
Contributor

Summary: Security update — 2 packages upgraded (MINOR changes included)

Manifests changed:

  • . (go)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
golang.org/x/net v0.53.0 v0.56.0 minor Transitive 2 MEDIUM, 5 UNKNOWN
golang.org/x/sys v0.43.0 v0.46.0 minor Direct 1 UNKNOWN

Security Details

ℹ️ Other Vulnerabilities (8)
Package CVE Severity Summary Unsafe Version Fixed In Case
golang.org/x/net GO-2026-5028 MODERATE Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/html v0.53.0 0.55.0 -
golang.org/x/net GHSA-5cv4-jp36-h3mw MODERATE Go Net HTML parser is vulnerable to denial of service v0.53.0 0.55.0 -
golang.org/x/net GO-2026-5027 unknown Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html v0.53.0 0.55.0 -
golang.org/x/net GO-2026-5026 unknown Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna v0.53.0 0.55.0 -
golang.org/x/net GO-2026-5029 unknown Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html v0.53.0 0.55.0 -
golang.org/x/net GO-2026-5030 unknown Invoking duplicate attributes can cause XSS in golang.org/x/net/html v0.53.0 0.55.0 -
golang.org/x/net GO-2026-5025 unknown Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html v0.53.0 0.55.0 -
golang.org/x/sys GO-2026-5024 unknown Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows v0.43.0 0.44.0 -

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

@dd-prapprover-prod-77c48c

dd-prapprover-prod-77c48c Bot commented Jul 7, 2026

Copy link
Copy Markdown

PRApprover will approve and merge this PR, FAQ, #dx-source-code-management

🛠️ PRApproval Status

  • ✅ PR is eligible for auto-approval by rule dependency-management-version-updater - 2026-07-07T13:07:51Z
  • ✅ CI tests passed - 2026-07-07T13:07:55Z
  • ✅ Approved (commit: a902119) - 2026-07-07T13:07:58Z
  • ✅ Merge Started
  • ⬜ Merged

➡️ Current phase: merge in progress...

@dd-prapprover-prod-77c48c dd-prapprover-prod-77c48c Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR has been automatically approved by the DD PR Approver bot.

@julesmcrt
julesmcrt added this pull request to the merge queue Jul 7, 2026
Merged via the queue into main with commit 1bd5ace Jul 7, 2026
47 checks passed
@julesmcrt
julesmcrt deleted the engraver-auto-version-upgrade/minorpatch/go/1-1783380019 branch July 7, 2026 13:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant