Compare commits

..

3 Commits

Author SHA1 Message Date
Gargithakur01 af74468789 fix: [CI-23227]: bump golang.org/x/net to v0.55.0
Resolves CVE-2026-39821 (x/net/idna Improper Authentication, Critical)
and CVE-2026-33814 (x/net/http2 Infinite loop, High) surfaced in the
kaniko-acr plugin binary.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-24 19:02:59 +05:30
Gargithakur01 3b94e510b6 fix: [CI-23227]: bump vbatts/tar-split to v0.12.2
Resolves the High-severity tar-split (archive/tar) vulnerability flagged
by Snyk in the kaniko-docker plugin binary. tar-split is pulled in
transitively via go-containerregistry -> estargz. go mod tidy also nudged
urfave/cli v1.22.15 -> v1.22.16 (benign patch).

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-24 15:18:44 +05:30
Gargithakur01 c4e18cc2c3 fix: [CI-23227]: Vuln-Fix-Kaniko
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-24 15:16:17 +05:30

Diff Content Not Available