Update module golang.org/x/net to v0.56.0 (master) - #13
Open
mend-for-github-com[bot] wants to merge 1 commit into
Open
Update module golang.org/x/net to v0.56.0 (master)#13mend-for-github-com[bot] wants to merge 1 commit into
mend-for-github-com[bot] wants to merge 1 commit into
Mend for GitHub.com / WhiteSource Security Check
failed
Jul 22, 2026 in 2m 10s
Security Report
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Exploit Maturity | EPSS | Vulnerable Library | Direct Library | Suggested Fix | Issue | Reachability |
|---|---|---|---|---|---|---|---|---|---|
CVE-2026-56852Path to dependency file: /go.mod Path to vulnerable library: /go.mod Dependency Hierarchy: -> golang.org/x/net-v0.56.0 (Root Library) -> ❌ golang.org/x/text-v0.38.0 (Vulnerable Library) |
 High |
7.5 | Not Defined | 0.222% | Transitive golang.org/x/text-v0.38.0 |
golang.org/x/net-v0.56.0 | Transitive v0.39.0 |
None | |
CVE-2026-56852Path to dependency file: /go.mod Path to vulnerable library: /go.mod Dependency Hierarchy: -> github.com/go-openapi/spec-v0.19.5 (Root Library) -> github.com/go-openapi/jsonreference-v0.19.3 -> github.com/PuerkitoBio/purell-v1.1.1 -> ❌ golang.org/x/text-v0.38.0 (Vulnerable Library) |
High |
7.5 | Not Defined | 0.222% | Transitive golang.org/x/text-v0.38.0 |
github.com/go-openapi/spec-v0.19.5 | Transitive v0.39.0 |
None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2026-39828 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2020-28852 | golang.org/x/text-v0.3.2 |
| CVE-2026-42506 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2026-25680 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2025-47914 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2023-48795 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2021-44716 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2022-27191 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-42502 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2026-39832 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-46597 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-39835 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-42508 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-46595 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-39821 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2026-39833 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2022-41721 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2026-46600 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2025-47913 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2022-30636 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-56852 | golang.org/x/text-v0.3.2 |
| CVE-2021-43565 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2021-33194 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2020-28851 | golang.org/x/text-v0.3.2 |
| CVE-2022-32149 | golang.org/x/text-v0.3.2 |
| CVE-2026-39834 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-39824 | golang.org/x/sys-v0.0.0-20200223170610-d5e6a3e2c0ae |
| CVE-2020-29652 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-27136 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2024-45337 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-39829 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2025-22870 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2026-25681 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2025-58181 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2024-45338 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2026-46598 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2020-14040 | golang.org/x/text-v0.3.2 |
| CVE-2026-39830 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-39831 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2021-31525 | golang.org/x/net-v0.0.0-20200226121028-0de0cce0169b |
| CVE-2025-22869 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2026-39827 | golang.org/x/crypto-v0.0.0-20200221231518-2aa609cf4a9d |
| CVE-2021-38561 | golang.org/x/text-v0.3.2 |
Base branch total remaining vulnerabilities: 53
Base branch commit: 48f7b5d535f227fa317b341c7d11008823873dd3
Total libraries scanned: 75
Scan token: 162736ddebc34489a679193f8fe7ad74
Loading