Skip to content

[Cycode] Fix for vulnerable manifest file dependency - golang.org/x/crypto updated to version 0.52.0 - #102

Open
cycode-security[bot] wants to merge 1 commit into
mainfrom
cycode-fix-suggestion-manifest-dependency-update-b0f792e1-3d78-4c16-9e2b-2ebeae316616
Open

cycode-security[bot] wants to merge 1 commit into
mainfrom
cycode-fix-suggestion-manifest-dependency-update-b0f792e1-3d78-4c16-9e2b-2ebeae316616

Conversation

@cycode-security

@cycode-security cycode-security Bot commented Jul 7, 2026

Copy link
Copy Markdown

Cycode Vulnerable Dependencies Update

This pull request updates the following manifest file:

File Path Number of packages to update
go.mod 1

📂 go.mod

1 package will be updated to resolve vulnerabilities:

Package Name Current Version Updated Version
golang.org/x/crypto 0.41.0 0.52.0

Note

Low Risk
Single dependency version bump with no logic changes; low risk though x/crypto backs crypto-related code paths and should be validated with normal CI/tests.

Overview
Bumps the direct golang.org/x/crypto dependency in go.mod from 0.41.0 to 0.52.0 to address reported vulnerabilities in the manifest (Cycode-driven dependency update).

No application code changes in this diff—only the module version pin is updated.

Reviewed by Cursor Bugbot for commit 44b2efb. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants