Skip to content

Security updates for golang and npm dependencies - #150

Open
djoreilly wants to merge 2 commits into
SUSE:sensor-base-0.76.7from
djoreilly:security-updates-oct09
Open

djoreilly wants to merge 2 commits into
SUSE:sensor-base-0.76.7from
djoreilly:security-updates-oct09

Conversation

@djoreilly

Copy link
Copy Markdown

Npm and golang dependency updates.

Update browserslist
Fixes CVE-2026-73088 (bsc#1275352)
Fixes CVE-2026-73089 (bsc#1275426)

Update js-yaml
Fixes CVE-2026-84375 (bsc#1278381)

Update momemt
Fixes CVE-2026-17495 (bsc#1280772)

Update brace-expansion
Fixes CVE-2026-102276 (bsc#1283191)
Fixes CVE-2026-102277 (bsc#1283372)
Fixes CVE-2026-102278 (bsc#1283401)
Found with govulncheck.

Update golang.org/x/crypto@v0.56.0
Fixes CVE-2026-56855 (bsc#1278454)
Fixes CVE-2026-78662 (bsc#1278454)
Fixes CVE-2026-56854 (bsc#1278454)

Update google.golang.org/grpc@v1.83.1
Fixes CVE-2026-84304

Update github.com/gorilla/websocket@v1.5.3
Fixes GHSA-w67g-5rqw-f597
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant