Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

Comments

[Snyk] Security upgrade golang from 1.17-alpine to 1.26rc3-alpine#3124

Open
lizardruss wants to merge 1 commit intomainfrom
snyk-fix-3fad8dac2c306b76514f35171d2b838f
Open

[Snyk] Security upgrade golang from 1.17-alpine to 1.26rc3-alpine#3124
lizardruss wants to merge 1 commit intomainfrom
snyk-fix-3fad8dac2c306b76514f35171d2b838f

Conversation

@lizardruss
Copy link
Collaborator

snyk-top-banner

Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

  • examples/dependencies/dependency1/Dockerfile

We recommend upgrading togolang:1.26rc3-alpine, as this image has only0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

IssueScore
critical severityOut-of-bounds Write
SNYK-ALPINE316-ZLIB-2976176
  714  
high severityCVE-2025-26519
SNYK-ALPINE316-MUSL-8720632
  614  
high severityCVE-2025-26519
SNYK-ALPINE316-MUSL-8720632
  614  
high severityDouble Free
SNYK-ALPINE316-OPENSSL-3314624
  614  
high severityAccess of Resource Using Incompatible Type ('Type Confusion')
SNYK-ALPINE316-OPENSSL-3314641
  614  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐View latest project report
📜Customise PR templates
🛠Adjust project settings
📚Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉Out-of-bounds Write
🦉Double Free
🦉Access of Resource Using Incompatible Type ('Type Confusion')

@netlify
Copy link

netlifybot commentedFeb 7, 2026
edited
Loading

Deploy Preview fordevspace-docs canceled.

NameLink
🔨 Latest commite0433c4
🔍 Latest deploy loghttps://app.netlify.com/projects/devspace-docs/deploys/69869d15e8f36d00087aab00

Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment

Reviewers

@FabianKrammFabianKrammAwaiting requested review from FabianKrammFabianKramm is a code owner

@LukasGenteleLukasGenteleAwaiting requested review from LukasGenteleLukasGentele is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@lizardruss@snyk-bot

[8]ページ先頭

©2009-2026 Movatter.jp