Skip to content

chore: bump go version to 1.24.11#25

Merged
ldming merged 2 commits into
mainfrom
support/bump-go-version
Jan 4, 2026
Merged

chore: bump go version to 1.24.11#25
ldming merged 2 commits into
mainfrom
support/bump-go-version

Conversation

@ldming
Copy link
Copy Markdown
Collaborator

@ldming ldming commented Jan 4, 2026

Fix

Report Summary

┌────────────────────────────────────────────────────┬──────────┬─────────────────┬─────────┐
│                       Target                       │   Type   │ Vulnerabilities │ Secrets │
├────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ docker.io/apecloud/datasafed:0.2.3 (alpine 3.22.2) │  alpine  │        0        │    -    │
├────────────────────────────────────────────────────┼──────────┼─────────────────┼─────────┤
│ datasafed                                          │ gobinary │        1        │    -    │
└────────────────────────────────────────────────────┴���─────────┴─────────────────┴─────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/v0.63/docs/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


datasafed (gobinary)
====================
Total: 1 (HIGH: 1, CRITICAL: 0)

┌─────────┬────────────────┬──────────┬────────┬───────────────────┬─────────────────┬───────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Status │ Installed Version │  Fixed Version  │                           Title                           │
├─────────┼────────────────┼──────────┼────────┼───────────────────┼─────────────────┼───────────────────────────────────────────────────────────┤
│ stdlib  │ CVE-2025-61729 │ HIGH     │ fixed  │ v1.24.10          │ 1.24.11, 1.25.5 │ crypto/x509: Excessive resource consumption when printing │
│         │                │          │        │                   │                 │ error string for host certificate validation...           │
│         │                │          │        │                   │                 │ https://avd.aquasec.com/nvd/cve-2025-61729                │
└─────────┴────────────────┴──────────┴────────┴───────────────────┴─────────────────┴───────────────────────────────────────────────────────────┘

@ldming ldming merged commit 2d44606 into main Jan 4, 2026
@ldming ldming deleted the support/bump-go-version branch January 4, 2026 03:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants