Skip to content

VLN-1878: remediate go-jose-below-4.1.6 - #161

Open
milescrabill wants to merge 2 commits into
mainfrom
VLN-1878-go-jose-v4.1.6
Open

milescrabill wants to merge 2 commits into
mainfrom
VLN-1878-go-jose-v4.1.6

Conversation

@milescrabill

Copy link
Copy Markdown

Finding

Rulego-jose-below-4.1.6
SeverityHIGH
AdvisoryGHSA-mgcc-cww5-fp2q (CVE-2026-116587)
Repositorytemporalio/samples-server
TicketVLN-1878

Summary

  • extensibility/go.mod, extensibility/go.sum: bumped github.com/go-jose/go-jose/v4 from v4.1.4 to v4.1.6.

@milescrabill
milescrabill requested a review from a team as a code owner October 27, 2026 23:19
Comment thread extensibility/go.sum Resolved
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants