Security vulnerabilities report #114
Description
Hi! Our security scanners report a small number of medium and high severity vulnerabilities. Could you clarify are there any plans in a near future to deal with them?
| CVE | Severity | Package and Version | Fix Version | Exploitable | Package Type |
|---|---|---|---|---|---|
| CVE-2025-22868 | High | golang.org/x/oauth2 v0.26.0 | v0.27.0 | False | golang |
| CVE-2025-22869 | High | golang.org/x/crypto v0.32.0 | v0.35.0 | False | golang |
| CVE-2025-22870 | High | golang.org/x/net v0.34.0 | v0.36.0 | False | golang |
| CVE-2025-4673 | High | Go 1.22.12 | v1.23.10 | False | golang |
| CVE-2025-0913 | Medium | Go 1.22.12 | v1.23.10 | False | golang |
| CVE-2025-22871 | Medium | Go 1.22.12 | v1.23.8 | False | golang |
| CVE-2025-22872 | Medium | golang.org/x/net v0.34.0 | v0.38.0 | False | golang |
| CVE-2025-47907 | Medium | Go 1.22.12 | v1.23.12 | False | golang |
This list is actual for releases 0.9.0 and 0.9.1