Nick Craig-Wood 869f777594 build: fix multiple CVEs by upgrading to go1.26.3 ...

- CVE-2026-42501: cmd/go: malicious module proxy can bypass checksum database
- CVE-2026-39825: net/http/httputil: ReverseProxy forwards queries with more than urlmaxqueryparams parameters
- CVE-2026-39836: net: panic in Dial and LookupPort when handling NUL byte on Windows
- CVE-2026-42499: net/mail: quadratic string concatenation in consumePhrase
- CVE-2026-39820: net/mail: quadratic string concatentation in consumeComment
- CVE-2026-39819: cmd/go: "go bug" follows symlinks in predictable temporary filenames
- CVE-2026-39817: cmd/go: "go tool pack" does not sanitize output paths
- CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE
- CVE-2026-39826: html/template: escaper bypass leads to XSS
- CVE-2026-33811: net: crash when handling long CNAME response
- CVE-2026-39823: html/template: bypass of meta content URL escaping causes XSS

2026-05-08 10:47:04 +01:00

..

build_publish_docker_image.yml

build: bump actions/github-script from 8 to 9

2026-04-17 18:10:03 +02:00

build_publish_docker_plugin.yml

build: add explicit permissions to GitHub Actions workflows

2026-04-09 14:37:30 +01:00

build.yml

build: fix multiple CVEs by upgrading to go1.26.3

2026-05-08 10:47:04 +01:00

notify.yml

build: add explicit permissions to GitHub Actions workflows

2026-04-09 14:37:30 +01:00

winget.yml

build: add explicit permissions to GitHub Actions workflows

2026-04-09 14:37:30 +01:00