chore(deps): update infra/blueprint-test security deps [security] by renovate-bot · Pull Request #3510 · GoogleCloudPlatform/cloud-foundation-toolkit

renovate-bot · 2026-11-10T16:37:48Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
filippo.io/edwards25519	`v1.1.0` → `v1.1.1`
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	`v1.6.7` → `v1.7.8`
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs	`v1.44.0` → `v1.65.0`
github.com/aws/aws-sdk-go-v2/service/lambda	`v1.69.0` → `v1.88.5`
github.com/aws/aws-sdk-go-v2/service/s3	`v1.69.0` → `v1.97.3`
github.com/jackc/pgx/v5	`v5.7.1` → `v5.9.2`
github.com/klauspost/compress	`v1.16.7` → `v1.18.7`
github.com/moby/spdystream	`v0.5.0` → `v0.5.1`
golang.org/x/crypto	`v0.47.0` → `v0.52.0`
golang.org/x/net	`v0.49.0` → `v0.55.0`

filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity

CVE-2026-26958 / GHSA-fw7p-63qq-7hpr

More information

Details

(*Point).MultiScalarMult failed to initialize its receiver.

If the method was called on an initialized point that is not the identity point, MultiScalarMult produced an incorrect result.

If the method was called on an uninitialized point, the behavior was undefined. In particular, if the receiver was the zero value, MultiScalarMult returned an invalid point that compared Equal to every point.

Note that MultiScalarMult is a rarely used advanced API. For example, if you only depend on filippo.io/edwards25519 via github.com/go-sql-driver/mysql, you are not affected. If you were notified of this issue despite not being affected, consider switching to a vulnerability scanner that is more precise and respectful of your attention, like govulncheck.

Severity

CVSS Score: 1.7 / 10 (Low)
Vector String: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

GHSA-xmrv-pmrh-hhx2

More information

Details

CVSSv3.1 Rating: [Medium]
CVSSv3.1 Score: [5.9]
CVSSv3.1 Vector String: [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H]

Summary and Impact

An issue exists in the the EventStream header decoder in AWS SDK for Go v2 in versions predating 2026-03-23. An actor can send a malformed EventStream response frame containing a crafted header value type byte outside the valid range, which can cause the host process to terminate.

Impacted versions: < 2026-03-23

Patches

This issue has been addressed in versions 2026-03-23 and above. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.

Workarounds

Not Applicable

References

If you have any questions or comments about this advisory, we ask that you contact [AWS/Amazon] Security via our vulnerability reporting page or directly via email to aws-security@amazon.com. Please do not create a public GitHub issue.

Severity

CVSS Score: 5.9 / 10 (Medium)
Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Memory-safety vulnerability in github.com/jackc/pgx/v5.

CVE-2026-33816 / GHSA-9jj7-4m8r-rfcm

More information

Details

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Severity

CVSS Score: 9.8 / 10 (Critical)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

CVE-2026-41889 / GHSA-j88v-2chj-qfwx

More information

Details

Impact

SQL Injection can occur when:

The non-default simple protocol is used.
A dollar quoted string literal is used in the SQL query.
That string literal contains text that would be would be interpreted as a placeholder outside of a string literal.
The value of that placeholder is controllable by the attacker.

e.g.

attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`, pgx.QueryExecModeSimpleProtocol, attackValue)

This is unlikely to occur outside of a contrived scenario.

Patches

The problem is resolved in v5.9.2.

Workarounds

Do not use the simple protocol to execute queries matching all the above conditions.

Severity

CVSS Score: 2.3 / 10 (Low)
Vector String: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

pgx contains memory-safety vulnerability

CVE-2026-33815 / GHSA-xgrm-4fwx-7qm8

More information

Details

pgx is a pure Go driver and toolkit for PostgreSQL. pgx prior to v5.9.0 contains a memory-safety vulnerability.

Severity

CVSS Score: 9.8 / 10 (Critical)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress

CVE-2026-63209 / GHSA-259r-337f-4rfw

More information

Details

Signed Integer Overflow in s2.NewDict

Summary

A signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode() is subsequently called, the overflowed negative repeat value causes an out-of-bounds memory access via unsafe.Pointer arithmetic, crashing the process with SIGSEGV.

Package

Name: github.com/klauspost/compress/s2
Ecosystem: Go
Affected versions: <= v1.18.6 (all versions with NewDict function)

Severity

High (7.5) — CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnerability

Type

CWE-190: Integer Overflow or Wraparound
CWE-787: Out-of-bounds Write (via unsafe.Pointer)

Description

The NewDict() function reads a uvarint from dictionary data and converts it to int:

r, n := binary.Uvarint(dict)
// ...
d.repeat = int(r)
if d.repeat > len(dict) {
    return nil
}

When r exceeds MaxInt64 (9223372036854775807), int(r) overflows to a negative value. Since a negative number is never greater than a positive length, the validation check is bypassed.

When Dict.Encode() is called, the negative repeat value causes an integer overflow in encodeBlockDictGo():

repeat := len(dict.dict) - dict.repeat  // overflows: 62 - (-5758978476775341977) = huge positive
candidate := len(dict.dict) - repeat + s // underflows to negative
load32(dict.dict, candidate)             // OOB via unsafe.Pointer

load32 calls le.Load32 which uses unsafe.Pointer arithmetic without bounds checking:

func Load32[I Indexer](b []byte, i I) uint32 {
    return *(*uint32)(unsafe.Add(unsafe.Pointer(unsafe.SliceData(b)), i))
}

This causes a segmentation fault (SIGSEGV) when the negative index is dereferenced.

PoC

package main

import (
    "encoding/binary"
    "fmt"
    "github.com/klauspost/compress/s2"
)

func main() {
    var dictData []byte
    buf := make([]byte, binary.MaxVarintLen64)
    n := binary.PutUvarint(buf, 12687765596934209639) // > MaxInt64
    dictData = append(dictData, buf[:n]...)
    dictData = append(dictData, make([]byte, 16)...) // minimum dict size

    dict := s2.NewDict(dictData)
    // dict is non-nil despite invalid repeat value (overflow bypassed validation)

    src := make([]byte, 64)
    for i := range src { src[i] = byte(i) }
    dict.Encode(nil, src) // SIGSEGV: OOB access via unsafe.Pointer
}

Impact

Denial of Service: The process crashes immediately with SIGSEGV

Attack Vector

Any application that:

Accepts user-supplied S2 dictionary data via s2.NewDict()
Calls Dict.Encode() on any data ≥32 bytes

Suggested Fix

Validate the uvarint value before converting to int:

if r > math.MaxInt64 {
    return nil
}
d.repeat = int(r)

Or use uint for the repeat field and validate against uint(len(dict)).

References

Source: s2/dict.go lines 59-61 (vulnerability), s2/encode_all.go line 947 (crash site)
Commit: 539243b (v1.18.6 + 4 commits)

Credits

Christopher Linke / https://github.com/celinke97/

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

SpdyStream: DOS on CRI

CVE-2026-35469 / GHSA-pc3f-x583-g7j2

More information

Details

The SPDY/3 frame parser in spdystream does not validate
attacker-controlled counts and lengths before allocating memory. A
remote peer that can send SPDY frames to a service using spdystream can
cause the process to allocate gigabytes of memory with a small number of
malformed control frames, leading to an out-of-memory crash.

Three allocation paths in the receive side are affected:

SETTINGS entry count -- The SETTINGS frame reader reads a 32-bit
numSettings from the payload and allocates a slice of that size
without checking it against the declared frame length. An attacker
can set numSettings to a value far exceeding the actual payload,
triggering a large allocation before any setting data is read.
Header count -- parseHeaderValueBlock reads a 32-bit
numHeaders from the decompressed header block and allocates an
http.Header map of that size with no upper bound.
Header field size -- Individual header name and value lengths are
read as 32-bit integers and used directly as allocation sizes with
no validation.

Because SPDY header blocks are zlib-compressed, a small on-the-wire
payload can decompress into attacker-controlled bytes that the parser
interprets as 32-bit counts and lengths. A single crafted frame is
enough to exhaust process memory.

Impact

Any program that accepts SPDY connections using spdystream -- directly
or through a dependent library -- is affected. A remote peer that can
send SPDY frames to the service can crash the process with a single
crafted SPDY control frame, causing denial of service.

Affected versions

github.com/moby/spdystream <= v0.5.0

Fix

v0.5.1 addresses the receive-side allocation bugs and adds related
hardening:

Core fixes:

SETTINGS entry-count validation -- The SETTINGS frame reader now
checks that numSettings is consistent with the declared frame
length (numSettings <= (length-4)/8) before allocating.
Header count limit -- parseHeaderValueBlock enforces a maximum
number of headers per frame (default: 1000).
Header field size limit -- Individual header name and value
lengths are checked against a per-field size limit (default: 1 MiB)
before allocation.
Connection closure on protocol error -- The connection read loop
now closes the underlying net.Conn when it encounters an
InvalidControlFrame error, preventing further exploitation on the
same connection.

Additional hardening:
Write-side bounds checks -- All frame write methods now verify
that payloads fit within the 24-bit length field, preventing the
library from producing invalid frames.

Configurable limits:
Callers can adjust the defaults using NewConnectionWithOptions or
the lower-level spdy.NewFramerWithOptions with functional options:
WithMaxControlFramePayloadSize, WithMaxHeaderFieldSize, and
WithMaxHeaderCount.

Severity

CVSS Score: 8.7 / 10 (High)
Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS

CVE-2026-39829 / GHSA-w879-237q-wc7r

More information

Details

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

golang.org/x/crypto vulnerable to infinite loop on large channel writes

CVE-2026-39834 / GHSA-rm3j-f69w-wqmq

More information

Details

When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.

Severity

CVSS Score: 9.1 / 10 (Critical)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

golang.org/x/crypto: Invoking pathological inputs can lead to client panic

CVE-2026-46598 / GHSA-9m57-25v3-79x9

More information

Details

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.

Severity

CVSS Score: 5.3 / 10 (Medium)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement

CVE-2026-46595 / GHSA-x527-x647-q7gg

More information

Details

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.

Severity

CVSS Score: 10.0 / 10 (Critical)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed

CVE-2026-39831 / GHSA-89gr-r52h-f8rx

More information

Details

The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permissions.Extensions from PublicKeyCallback.

Severity

CVSS Score: 9.1 / 10 (Critical)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

CVE-2026-46597 / GHSA-q4h4-gmj2-qvw2

More information

Details

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

Severity

CVSS Score: 7.5 / 10 (High)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys

CVE-2026-39832 / GHSA-f5wc-c3c7-36mc

More information

Details

When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.

Severity

CVSS Score: 9.1 / 10 (Critical)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status

CVE-2026-42508 / GHSA-5cgq-3rg8-m6cv

More information

Details

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

Severity

CVSS Score: 9.1 / 10 (Critical)
Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions

CVE-2026-39828 / GHSA-45gg-vh54-h5m9

More information

Details

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.

Severity

CVSS Score: 6.3 / 10 (Medium)
Vector String: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

[!IMPORTANT]
✂ PR body was truncated to here.

forking-renovate · 2026-11-10T16:37:50Z

ℹ️ Artifact update notice

File name: infra/blueprint-test/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

15 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.0` -> `1.25.0`
`golang.org/x/mod`	`v0.33.0` -> `v0.35.0`
`github.com/aws/aws-sdk-go-v2`	`v1.32.5` -> `v1.41.5`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.3.24` -> `v1.4.21`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.24` -> `v2.7.21`
`github.com/aws/aws-sdk-go-v2/internal/v4a`	`v1.3.24` -> `v1.4.22`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.12.1` -> `v1.13.7`
`github.com/aws/aws-sdk-go-v2/service/internal/checksum`	`v1.4.5` -> `v1.9.13`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.12.5` -> `v1.13.21`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.18.5` -> `v1.19.21`
`github.com/aws/smithy-go`	`v1.22.1` -> `v1.24.2`
`golang.org/x/sync`	`v0.19.0` -> `v0.20.0`
`golang.org/x/sys`	`v0.40.0` -> `v0.45.0`
`golang.org/x/term`	`v0.39.0` -> `v0.43.0`
`golang.org/x/text`	`v0.33.0` -> `v0.37.0`
`golang.org/x/tools`	`v0.41.0` -> `v0.44.0`

dpebot · 2026-11-10T16:38:02Z

/gcbrun

gemini-code-assist

Code Review

This pull request updates the Go version from 1.24.0 to 1.25.0 in infra/blueprint-test/go.mod and removes the toolchain specification. It also upgrades several direct and indirect dependencies, including the AWS SDK, golang.org/x packages, pgx, and compress, with corresponding updates to go.sum. I have no feedback to provide.

dpebot · 2026-11-10T17:15:22Z

/gcbrun

dpebot · 2026-11-10T18:58:25Z

/gcbrun

dpebot · 2026-11-10T19:35:09Z

/gcbrun

dpebot · 2026-11-10T21:37:37Z

/gcbrun

dpebot · 2026-11-10T22:55:47Z

/gcbrun

dpebot · 2026-11-11T05:58:57Z

/gcbrun

dpebot · 2026-11-12T17:25:57Z

/gcbrun

renovate-bot requested a review from bharathkkb as a code owner November 10, 2026 16:37

forking-renovate Bot added the type:security label Nov 10, 2026

renovate-bot requested review from apeabody, g-awmalik and q2w as code owners November 10, 2026 16:37

renovate-bot added the type:security label Nov 10, 2026

gemini-code-assist Bot reviewed Nov 10, 2026

View reviewed changes

apeabody mentioned this pull request Nov 10, 2026

fix(deps): bump the go_modules group across 5 directories with 10 updates #3466

Closed

renovate-bot force-pushed the renovate/infra-blueprint-test-security-deps branch from 6213a13 to eb68a69 Compare November 10, 2026 17:15

apeabody approved these changes Nov 10, 2026

View reviewed changes

renovate-bot force-pushed the renovate/infra-blueprint-test-security-deps branch from eb68a69 to 99085be Compare November 10, 2026 18:58

renovate-bot force-pushed the renovate/infra-blueprint-test-security-deps branch from 99085be to 6355d3c Compare November 10, 2026 19:34

renovate-bot force-pushed the renovate/infra-blueprint-test-security-deps branch from 6355d3c to a806240 Compare November 10, 2026 21:37

renovate-bot force-pushed the renovate/infra-blueprint-test-security-deps branch from a806240 to 5211d00 Compare November 10, 2026 22:55

renovate-bot force-pushed the renovate/infra-blueprint-test-security-deps branch from 5211d00 to 4359fc6 Compare November 11, 2026 05:58

chore(deps): update infra/blueprint-test security deps [security]

2837761

renovate-bot force-pushed the renovate/infra-blueprint-test-security-deps branch from 4359fc6 to 2837761 Compare November 12, 2026 17:25

Navigation Menu

Repository navigation

chore(deps): update infra/blueprint-test security deps [security] - #3510

chore(deps): update infra/blueprint-test security deps [security]#3510
renovate-bot wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/infra-blueprint-test-security-deps

renovate-bot commented Nov 10, 2026 •

edited

Loading

Uh oh!

forking-renovate Bot commented Nov 10, 2026

Uh oh!

dpebot commented Nov 10, 2026

Uh oh!

gemini-code-assist Bot left a comment

Uh oh!

dpebot commented Nov 10, 2026

Uh oh!

dpebot commented Nov 10, 2026

Uh oh!

dpebot commented Nov 10, 2026

Uh oh!

dpebot commented Nov 10, 2026

Uh oh!

dpebot commented Nov 10, 2026

Uh oh!

dpebot commented Nov 11, 2026

Uh oh!

dpebot commented Nov 12, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

renovate-bot commented Nov 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity

Details

Severity

References

Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder

Details

Summary and Impact

Patches

Workarounds

References

Severity

References

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Details

Severity

References

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

Details

Impact

Patches

Workarounds

Severity

References

pgx contains memory-safety vulnerability

Details

Severity

References

Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress

Details

Signed Integer Overflow in s2.NewDict

Summary

Package

Severity

Vulnerability

Type

Description

PoC

Impact

Attack Vector

Suggested Fix

References

Credits

Severity

References

SpdyStream: DOS on CRI

Details

Impact

Affected versions

Fix

Severity

References

golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS

Details

Severity

References

golang.org/x/crypto vulnerable to infinite loop on large channel writes

Details

Severity

References

golang.org/x/crypto: Invoking pathological inputs can lead to client panic

Details

Severity

References

golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement

Details

Severity

References

golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed

Details

Severity

References

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

Details

Severity

References

golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys

Details

renovate-bot commented Nov 10, 2026 •

edited

Loading

golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status