chore(deps): update module golang.org/x/net to v0.53.0 [security]#2051
Conversation
|
|
1 similar comment
|
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #2051 +/- ##
==========================================
+ Coverage 32.57% 32.61% +0.04%
==========================================
Files 77 77
Lines 7132 7132
==========================================
+ Hits 2323 2326 +3
+ Misses 4613 4611 -2
+ Partials 196 195 -1 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
0e8d400 to
73969b6
Compare
73969b6 to
8d6f240
Compare
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
8d6f240 to
66fc276
Compare
This PR contains the following updates:
v0.52.0→v0.53.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
CVE-2026-33814 / GO-2026-4918
More information
Details
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
Severity
Unknown
References
This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.