Skip to content

Update module golang.org/x/net to v0.13.0 [SECURITY]

Renovate Bot requested to merge renovate/go-golang.org/x/net-vulnerability into main

This MR contains the following updates:

Package Type Update Change
golang.org/x/net require minor v0.11.0 -> v0.13.0

Improper rendering of text nodes in golang.org/x/net/html

CVE-2023-3978 / GO-2023-1988

More information

Details

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack.

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by Renovate Bot

Merge request reports