[release-3.5] workflow pull-etcd-govulncheck fails
area/securitytype/feature
### What would you like to be added?
https://prow.k8s.io/view/gs/kubernetes-ci-logs/pr-logs/pull/etcd-io_etcd/21793/pull-etcd-govulncheck/2057990041552031744
```
Vulnerability #1: GO-2026-5033
Invoking pathological inputs can lead to client panic in
golang.org/x/crypto/ssh/agent
More info: https://pkg.go.dev/vuln/GO-2026-5033
Module: golang.org/x/crypto
Found in: golang.org/x/crypto@v0.50.0
Fixed in: golang.org/x/crypto@v0.52.0
99 skipped lines...
Module: golang.org/x/crypto
Found in: golang.org/x/crypto@v0.50.0
Fixed in: golang.org/x/crypto@v0.52.0
Vulnerability #15: GO-2026-5015
Invoking server panic during CheckHostKey/Authenticate in
golang.org/x/crypto/ssh
More info: https://pkg.go.dev/vuln/GO-2026-5015
Module: golang.org/x/crypto
Found in: golang.org/x/crypto@v0.50.0
Fixed in: golang.org/x/crypto@v0.52.0
Vulnerability #16: GO-2026-5014
Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh
More info: https://pkg.go.dev/vuln/GO-2026-5014
Module: golang.org/x/crypto
Found in: golang.org/x/crypto@v0.50.0
Fixed in: golang.org/x/crypto@v0.52.0
Vulnerability #17: GO-2026-5013
Invoking byte arithmetic causes underflow and panic in
golang.org/x/crypto/ssh
More info: https://pkg.go.dev/vuln/GO-2026-5013
Module: golang.org/x/crypto
Found in: golang.org/x/crypto@v0.50.0
Fixed in: golang.org/x/crypto@v0.52.0
```
### Why is this needed?
.
0 条评论