diranged / oz
36%

DEFAULT BRANCH: main
Repo Added
Files 83
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: main
CHANGE BRANCH
x

coverage: 35.907%. Remained the same
38561538290

push

github

web-flow 
chore(deps): update module golang.org/x/net to v0.55.0 [security] (#467)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.49.0` →
`v0.55.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.49.0...refs/tags/v0.55.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.55.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.49.0/v0.55.0?slim=true)
|

---

### Go Net HTML parser is vulnerable to denial of service
[CVE-2026-25680](https://nvd.nist.gov/vuln/detail/CVE-2026-25680) /
[GHSA-5cv4-jp36-h3mw](https://redirect.github.com/advisories/GHSA-5cv4-jp36-h3mw)

<details>
<summary>More information</summary>

#### Details
In Go Net (`golang.org/x/net`) before verion 0.55.0, parsing arbitrary
HTML can consume excessive CPU time, possibly leading to denial of
service.

#### Severity
- CVSS Score: 6.5 / 10 (Medium)
- Vector String: `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H`

#### References
-
[https://nvd.nist.gov/vuln/detail/CVE-2026-25680](https://nvd.nist.gov/vuln/detail/CVE-2026-25680)
- [https://go.dev/cl/781702](https://go.dev/cl/781702)
- [https://go.dev/issue/79573](https://go.dev/issue/79573)
-
[https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8](https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8)
-
[https://pkg.go.dev/vuln/GO-2026-5028](https://pkg.go.dev/vuln/GO-2026-5028)
-
[https://go.googlesource.com/net/+/<a class=hub.com/diranged/oz/commit/08be507abce89191d78cd49da60f4501fc910472">08be507ab](https://go.googlesource.com/net/+/08be507abce89191d78cd49da60f4501fc910472)
-
[https://go.googlesource.com/net/+/refs/tags/v0.55.0](https://go.googlesource.com/net/+/refs/tags/v0.55.0)
-
[https://github.com/advisories/GHSA-5cv4-jp36-h3mw](https://redirect.github.com/advisories/GHSA-5cv4-j... (continued)

1037 of 2888 relevant lines covered (35.91%)

1.56 hits per line

Relevant lines Covered
2888 RELEVANT LINES 1037 COVERED LINES
1.56 HITS PER LINE
Source Files on main

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
38561538290 main chore(deps): update module golang.org/x/net to v0.55.0 [security] (#467) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confide... push web-flow github
35.91
38514975001 main chore(deps): update module go.opentelemetry.io/otel/sdk to v1.45.0 [security] (#466) > [!NOTE] > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/... push web-flow github
35.91
38492700376 main chore(deps): update module go.opentelemetry.io/otel to v1.41.0 [security] (#463) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge... push web-flow github
35.91
38484866442 main chore(deps): update module github.com/google/cel-go to v0.29.0 [security] (#462) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge... push web-flow github
35.91
24525913281 main fix(deps): update k8s.io to v0.35.4 (patch) (#457) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|-... push web-flow github
35.91
24118407201 main chore(deps): update dependency go to v1.26.2 (#456) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [go](https://go.dev/) ([source](https://redirect.github.com/golang/go)) | toolchain | patch | `1... push web-flow github
35.91
23930165411 main chore(deps): update docker/login-action action to v4.1.0 (#455) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/login-action](https://redirect.github.com/docker/login-action) | action | mi... push web-flow github
35.91
23468868474 main chore(deps): update azure/setup-helm action to v5 (#454) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [azure/setup-helm](https://redirect.github.com/azure/setup-helm) | action | major | `v4` → ... push web-flow github
35.91
23372803859 main fix(deps): update module github.com/argoproj/argo-rollouts to v1.9.0 (#453) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-conf... push web-flow github
35.91
23344485205 main fix(deps): update module github.com/fatih/color to v1.19.0 (#452) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |... push web-flow github
35.91
See All Builds (1032)