Description
The Go lint CI check is currently failing on all PRs due to security vulnerabilities in Go 1.25.5. The govulncheck tool detects the following vulnerabilities in the Go standard library:
Vulnerabilities Found
| ID |
Description |
Affected |
Fixed In |
| GO-2026-4341 |
Memory exhaustion in query parameter parsing in net/url |
go1.25.5 |
go1.25.6 |
| GO-2026-4340 |
Handshake messages processed at incorrect encryption level in crypto/tls |
go1.25.5 |
go1.25.6 |
| GO-2026-4342 |
Excessive CPU consumption when building archive index in archive/zip |
go1.25.5 |
go1.25.6 |
Suggested Fix
Update the Go version in CI workflows from 1.25.5 to 1.25.6.
References
Impact
This is blocking all PR lint checks until resolved.
Description
The Go lint CI check is currently failing on all PRs due to security vulnerabilities in Go 1.25.5. The
govulnchecktool detects the following vulnerabilities in the Go standard library:Vulnerabilities Found
net/urlcrypto/tlsarchive/zipSuggested Fix
Update the Go version in CI workflows from
1.25.5to1.25.6.References
Impact
This is blocking all PR lint checks until resolved.