Skip to content

build(deps): bump golang.org/x/net to v0.55.0 #1908

Description

@mzhang77

Fixes GHSA-w2q5-6q6x-x959 (GO-2026-5026): golang.org/x/net/idna ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only label, which can lead to privilege escalation in programs performing hostname-based checks.

x/net v0.55.0 implements UTS 46 revision 33 which fixes the underlying specification bug. 'go mod tidy' updates the transitive golang.org/x/* modules (crypto, mod, sync, sys, text, tools) to satisfy x/net's minimum requirements.

refer: #1905

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions