-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
CI fails on vulnerability checks due to CVE-2025-22874 #4909
Copy link
Copy link
Closed
Labels
kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.
Description
Describe the bug
Due to CVE-2025-22874 vulnerability published on 12 June, all CI runs are failing since then. Here are a few examples:
To Reproduce
Steps to reproduce the behavior:
Simply file a Pull Request and observe this CI workflow fail.
Expected behavior
I expect CI to complete successfully.
Additional context
I suspect the easier fix is to upgrade go from 1.24.2 to 1.24.4 released on June 5 which is not affected by CVE-2025-22874. I will file a PR with the upgrade to see if it works.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
kind/bugCategorizes issue or PR as related to a bug.Categorizes issue or PR as related to a bug.