ITADN

[release-3.5] workflow pull-etcd-govulncheck fails

#21796Openahrtr 创建于 2026-05-23
area/securitytype/feature
A
ahrtrcommented
### What would you like to be added? https://prow.k8s.io/view/gs/kubernetes-ci-logs/pr-logs/pull/etcd-io_etcd/21793/pull-etcd-govulncheck/2057990041552031744 ``` Vulnerability #1: GO-2026-5033 Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent More info: https://pkg.go.dev/vuln/GO-2026-5033 Module: golang.org/x/crypto Found in: golang.org/x/crypto@v0.50.0 Fixed in: golang.org/x/crypto@v0.52.0 99 skipped lines... Module: golang.org/x/crypto Found in: golang.org/x/crypto@v0.50.0 Fixed in: golang.org/x/crypto@v0.52.0 Vulnerability #15: GO-2026-5015 Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh More info: https://pkg.go.dev/vuln/GO-2026-5015 Module: golang.org/x/crypto Found in: golang.org/x/crypto@v0.50.0 Fixed in: golang.org/x/crypto@v0.52.0 Vulnerability #16: GO-2026-5014 Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh More info: https://pkg.go.dev/vuln/GO-2026-5014 Module: golang.org/x/crypto Found in: golang.org/x/crypto@v0.50.0 Fixed in: golang.org/x/crypto@v0.52.0 Vulnerability #17: GO-2026-5013 Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh More info: https://pkg.go.dev/vuln/GO-2026-5013 Module: golang.org/x/crypto Found in: golang.org/x/crypto@v0.50.0 Fixed in: golang.org/x/crypto@v0.52.0 ``` ### Why is this needed? .
0 条评论