opendefensecloud / artifact-conduit / 38539422693
86%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 17
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.775% (-0.5%) from 86.264%
38539422693

push

github

web-flow 
chore(deps): update module go.etcd.io/etcd/client/pkg/v3 to v3.7.1 [security] (#520)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[go.etcd.io/etcd/client/pkg/v3](https://redirect.github.com/etcd-io/etcd)
| `v3.7.0` → `v3.7.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.etcd.io%2fetcd%2fclient%2fpkg%2fv3/v3.7.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.etcd.io%2fetcd%2fclient%2fpkg%2fv3/v3.7.0/v3.7.1?slim=true)
|

---

### Unbounded TLS handshake goroutines in go.etcd.io/etcd/client/pkg/v3
BIT-etcd-2026-73500 /
[CVE-2026-73500](https://nvd.nist.gov/vuln/detail/CVE-2026-73500) /
[GHSA-6vch-q96h-7gc3](https://redirect.github.com/advisories/GHSA-6vch-q96h-7gc3)
/ [GO-2026-6107](https://pkg.go.dev/vuln/GO-2026-6107)

<details>
<summary>More information</summary>

#### Details
In go.etcd.io/etcd/client/pkg/v3 before 3.5.33, 3.6.14, and 3.7.1, TLS
handshakes on listeners created by NewTLSListener do not enforce a
handshake deadline. An unauthenticated network attacker who connects to
an etcd TLS listener without sending a ClientHello causes a goroutine
and a tracking map entry to block indefinitely. Opening many such
connections exhausts memory, leading to a denial of service.

#### Severity
Unknown

#### References
-
[https://github.com/etcd-io/etcd/security/advisories/GHSA-6vch-q96h-7gc3](https://redirect.github.com/etcd-io/etcd/security/advisories/GHSA-6vch-q96h-7gc3)
-
[https://github.com/etcd-io/etcd/pull/22130](https://redirect.github.com/etcd-io/etcd/pull/22130)
-
[https://github.com/etcd-io/etcd/releases/tag/v3.5.33](https://redirect.github.com/etcd-io/etcd/releases/tag/v3.5.33)
-
[https://github.com/etcd-io/etcd/releases/tag/v3.6.14](https://redirect.github.com/etcd-io/etcd/releases/tag/v3.6.14)
-
[https://github.com/etcd-io/etcd/releases/... (continued)

1405 of 1638 relevant lines covered (85.78%)

1709.45 hits per line

Coverage Regressions

Lines Coverage ∆ File
8
80.91
-3.64% pkg/controller/workflow_handler.go
Jobs
ID Job ID Ran Files Coverage
1 38539422693.1 17
85.78
GitHub Action Run
Source Files on build 38539422693