Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Upgrade golang.org/x/crypto to v0.31.0 (#603)
Description: This PR updates golang.org/x/crypto to the latest version (v0.31.0) to mitigate the security vulnerability identified as [CVE-2024-45337](https://nvd.nist.gov/vuln/detail/CVE-2024-45337). Summary of Changes: Updated go.mod to require golang.org/x/[email protected]. Ran go mod tidy to clean up dependencies. Why This Change Is Important: The previously used version of golang.org/x/crypto was affected by CVE-2024-45337. Upgrading to v0.31.0 resolves this issue and ensures the library remains secure and up-to-date. Impact: No breaking changes are expected as v0.31.0 is backward-compatible with prior versions. Improves the security posture of the project by addressing a critical vulnerability. References: CVE-2024-45337: https://nvd.nist.gov/vuln/detail/CVE-2024-45337 Golang changelog for x/crypto: https://pkg.go.dev/golang.org/x/crypto Please let me know if you have any feedback or require additional changes. Thank you for reviewing this PR!
- Loading branch information