Skip to content

Commit b294ba4

Browse files
authored
fix: upgrade Go from 1.25.5 to 1.25.6 to patch CVE-2025-61726, CVE-2025-61728, CVE-2025-61730 (#1992)
Upgrade Go version from 1.25.5 to 1.25.6 to fix multiple CVEs in the standard library: - CVE-2025-61726: net/url package doesn't set a limit on query parameters (DoS) - CVE-2025-61728: archive/zip uses super-linear file name indexing (DoS) - CVE-2025-61730: TLS 1.3 handshake boundary issue (Information Disclosure) Verification: go build completed successfully
1 parent d9dd3db commit b294ba4

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module github.com/streamnative/pulsarctl
22

3-
go 1.25.5
3+
go 1.25.6
44

55
require (
66
github.com/apache/pulsar-client-go v0.18.0-candidate-1.0.20251222030102-3bb7d4eff361

0 commit comments

Comments
 (0)