Skip to content

security: vulnerability remediation - #512

Open
kernel-internal[bot] wants to merge 1 commit into
mainfrom
security/vuln-remediation
Open

kernel-internal[bot] wants to merge 1 commit into
mainfrom
security/vuln-remediation

Conversation

@kernel-internal

@kernel-internal kernel-internal Bot commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Vulnerability Remediation

This PR was generated by the Socket-centric vulnerability remediation workflow. Review the planned dependency changes and confirmation evidence before merging.

Fixed

CVE/GHSA Package Ecosystem Old Version New Version Manifest Confirmation
GHSA-259r-337f-4rfw github.com/klauspost/compress None v1.18.0 1.20.2 confirmed

Not Included

  • Deferred by batch limit: 21 advisories. They will be considered by future runs.
  • Other deferred scanner findings: 1.
  • Unconfirmed attempted fixes: 0.
Deferred details
CVE/GHSA Package Reason
Unavailable from detector github.com/getkin/kin-openapi Missing CVE/GHSA identifier required for Socket fix planning.

@socket-security

socket-security Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​klauspost/​compress@​v1.18.0 ⏵ v1.18.792 +185 +6100100100

View full report

@kernel-internal
kernel-internal Bot force-pushed the security/vuln-remediation branch 2 times, most recently from e805603 to ec9e1e4 Compare October 28, 2026 03:15
@kernel-internal
kernel-internal Bot force-pushed the security/vuln-remediation branch from ec9e1e4 to c5e3cc5 Compare November 4, 2026 03:12

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant