Skip to content

Conversation

@itzg
Copy link
Owner

@itzg itzg commented Sep 28, 2025

Addresses

=== Symbol Results === Vulnerability #1: GO-2025-3956 Unexpected paths returned from LookPath in os/exec More info: https://pkg.go.dev/vuln/GO-2025-3956 Standard library Found in: os/exec@go1.24.5 Fixed in: os/exec@go1.24.6 Example traces found: Error: #1: main.go:66:21: mc.main calls exec.Command, which calls exec.LookPath 
@itzg itzg added the dependencies Pull requests that update a dependency file label Sep 28, 2025
@itzg itzg merged commit d58d726 into master Sep 28, 2025
2 checks passed
@itzg itzg deleted the feat/go-1-24-6 branch September 28, 2025 14:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

2 participants