lukaszraczylo/traefikoidc
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/traefikoidc.git synced 2026-10-15 04:18:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

build: pin toolchain to go1.26.6 (resolves 5 reachable stdlib CVEs)

Browse Source 
- net/http, asn1, idna GO-2026 CVEs cleared; govulncheck now 0 findings
This commit is contained in:
lukaszraczylo
2026-08-14 16:17:32 +01:00
parent 113c3acc76
commit 71d2cf592b
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
go.mod
+5
View File
@@ -2,6 +2,11 @@ module github.com/lukaszraczylo/traefikoidc
go 1.24.0 go 1.24.0
// Pin the toolchain to a stdlib version without the go1.26.5 CVEs
// (GO-2026-6089 net/http ReadHeaderTimeout, GO-2026-5972 asn1 recursion,
// GO-2026-5026 idna) reported by govulncheck (R219). Auto-downloaded.
toolchain go1.26.6
require ( require (
github.com/alicebob/miniredis/v2 v2.35.0 github.com/alicebob/miniredis/v2 v2.35.0
github.com/gorilla/sessions v1.3.0 github.com/gorilla/sessions v1.3.0